XStore 9.7.8 XSS Security Warning – Please Confirm the Fix

This topic has 6 replies, 3 voices, and was last updated 5 days, 11 hours ago ago by Tony Rodriguez

  • Avatar: kris
    kris
    Participant
    October 19, 2026 at 10:04

    Hello XStore Support Team,

    My website is currently using XStore version 9.7.8, and my WordPress security tool has flagged the theme with the following warning:

    “Cross Site Scripting (XSS) vulnerability discovered by Nguyen Ba Khanh – HPT Vietnam Corporation in WordPress Theme XStore (versions < 9.7.9).” I have attached screenshots for reference. Could you please clarify the following? 1. Has this vulnerability been fully fixed in version 9.7.9 or later? 2. Which version should I install to resolve this issue? 3. Does the fix also require updating XStore Core or any bundled plugins? 4. If the theme update is not available in my WordPress dashboard, how can I obtain and install the patched version? I would appreciate your guidance on safely updating the theme while preserving my website’s settings and customizations. Thank you.

    Files is visible for topic creator and
    support staff only.
    5 Answers
    Avatar: Jack Richardson
    Jack Richardson
    Support staff
    October 19, 2026 at 11:36

    Hello @kris,

    In our latest update, version 9.7.9, we included multiple security fixes, which you can find in our changelog at https://xstore.8theme.com/update-history/. Please update to the latest version, currently 9.7.10, to ensure all fixes are applied to your website. Additionally, please note that refreshing the security patches in your panel may take some time due to caching. Therefore, after the update, you may need to wait 1-2 days for the security log to auto-clear on your warning panel.

    Our documentation for secure theme update: https://www.8theme.com/documentation/xstore/theme-installation/theme-update/

    Best regards,
    8Theme’s Team

    Avatar: kris
    kris
    Participant
    October 20, 2026 at 14:02

    thanks

    I’ve been watching your YouTube tutorials to learn more about XStore, but the latest videos shown on your channel are from around two years ago.

    Are you planning to publish updated tutorials? I’m using XStore with Elementor and would love more step-by-step videos covering the current features, especially navigation menus, product page layouts, mobile customization, and built-in sales tools.

    XStore has many features, but it’s not always clear how to use them or what’s possible. More practical tutorials would really help us get the most out of the theme.

    Please consider updating the channel. If you have newer tutorials elsewhere, could you share the link?

    Thank you!

    Avatar: Jack Richardson
    Jack Richardson
    Support staff
    October 20, 2026 at 14:12

    Hello @kris,

    Thank you for your suggestions. We have added your suggestion to our to-do list. However, we recommend that you review our documentation, which includes detailed screenshots in most of our articles, at the following link: https://www.8theme.com/documentation/xstore/.

    If your primary request has been resolved, please mark this topic as closed.

    Best regards,
    Jack Richardson
    The 8Theme’s Team

    Avatar: kris
    kris
    Participant
    October 21, 2026 at 10:41

    Thanks for the support! My topic “XStore 9.7.8 XSS Security Warning – Please Confirm the Fix” has been successfully resolved.

    Avatar: Tony Rodriguez
    Tony Rodriguez
    Support staff
    October 21, 2026 at 10:41

    Dear kris,

    We really appreciate your time and engagement within the WordPress & WooCommerce community

    Your feedback drives every improvement we make in XStore — helping us deliver a smoother and more flexible experience with each update.

    Your input makes a real difference.

    Topic closed.
    The 8Theme Team

  • Viewing 6 results - 1 through 6 (of 6 total)

The issue related to '‘XStore 9.7.8 XSS Security Warning – Please Confirm the Fix’' has been successfully resolved, and the topic is now closed for further responses

We're using our own and third-party cookies to improve your experience and our website. Keep on browsing to accept our cookie policy.