CVE-2024-33564 is a CWE-862 Missing Authorization vulnerability in 8theme XStore versions up to 9.3.8. The vulnerability enables an attacker with low privileges to bypass authorization controls, resulting in complete compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no user interaction, and high impact on all security properties. No patch or official remediation level is currently available, and the vulnerability is not related to a cloud service.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. An attacker with low privileges can perform unauthorized actions without requiring user interaction, which may result in significant damage or data breach. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected XStore installations to trusted users only and monitor for suspicious activity related to authorization bypass attempts.