Xstore core is flagged as critical and is blocked

Hello @Joris,

The credentials you provided are incorrect for login. Please verify the access details and provide us with the correct information so we can investigate the issue. Additionally, we have attached a screenshot of the notices in the private area.

Best regards,
Jack Richardson
The 8Theme’s Team

Hello @Joris,

The access credentials are still incorrect. A video has been attached in the private content for your reference. We kindly ask you to respect our support time by ensuring that the credentials are correct before sharing them on our support forum.

Best regards,
Jack Richardson
The 8Theme’s Team

Hello @Joris,

Thank you for providing us with the correct credentials. Could you please check the recovery link sent to your email? Upon our testing, it appears that the main issue is caused by some of your additional plugins that use the same code modules as we do, leading to conflicts (https://prnt.sc/vtfSdSz2_9or). We believe the plugin “Envo Extra” might be responsible, as we encountered no issues after disabling a few plugins, including this one, on your staging environment and then activating the XStore Core. The primary reason you could not activate our plugin is that it triggered a fatal error due to incompatibility issues. Therefore, we kindly ask you to review the suggested solution on your end and also provide us with temporary correct FTP access in the private content.

Best Regards,
Jack Richardson
The 8Theme’s Team

Hello @Joris,

The FTP access you provided appears to be loading an incorrect directory for your wp-staging website. Additionally, the folder with the same name is empty, as shown in this screenshot: https://prnt.sc/vEFIV6HXXrXK. Please verify the FTP access at your earliest convenience. We also kindly request that you set the PHP version to either 8.0 or 8.2 and check if the critical issues persist.

Upon reviewing the vulnerability issues in your dashboard, there is no information regarding the specific errors or code parts causing the vulnerability (https://prnt.sc/roPeBHDAkayt). Please note that our theme and plugin have been inspected using the https://patchstack.com/ service, and any previously mentioned issues (https://prnt.sc/YL9AZ2RvJQwS) have been addressed and included in our updates. We would like to understand how to identify the source of the vulnerabilities in our plugin, or if the source of such vulnerabilities is cached on Strato services. Therefore, we kindly ask you to contact your Strato services and request a refresh of the check or provide us a details of issues they found in our code so we could fix it and release in next update.

Best Regards,
Jack Richardson
The 8Theme’s Team

Hello @Joris,

We have reviewed your PDF analytics template and noted that it references issues related to our XStore Core plugin, but these pertain to a previous versions (https://prnt.sc/zncns8c5OpKi). Your current version of the plugin is 5.7.8, whereas the vulnerabilities mentioned are applicable to XStore Core versions 5.3.5 and earlier. Therefore, there are no errors in the version of XStore Core installed on your website. We recommend that you submit your topic to Strato support to ensure they are checking only the latest versions of plugins and themes. This is important as they might otherwise classify our plugin as vulnerable based on past issues that have already been resolved in updates, and the current version has all fixes implemented.

Best Regards,
Jack Richardson
The 8Theme’s Team