Advisories · Technology

Xtemos WoodMart.

Every CVE that names Xtemos WoodMart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-27086 CVE record

CVSS 6.5 Medium

WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability
- Xtemos WoodMart
- Cross-site scripting (XSS)
Not analysed yet 4 Sept 2026
CVE-2026-56072 CVE record

CVSS 7.1 High

WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability
- Xtemos WoodMart
- Cross-site scripting (XSS)
Not analysed yet 26 Jun 2026
CVE-2026-23971 CVE record

CVSS 8.1 High

WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability
- xtemos WoodMart
- Insecure deserialization
Not analysed yet 25 Mar 2026
CVE-2026-32405 CVE record

CVSS 5.3 Medium

WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability
- xtemos WoodMart
- Information disclosure
Not analysed yet 13 Mar 2026
CVE-2025-47600 CVE record

CVSS 5.3 Medium

WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability
- xtemos WoodMart
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026
CVE-2025-49936 CVE record

CVSS 6.5 Medium

WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability
- xtemos WoodMart
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-49935 CVE record

CVSS 7.5 High

WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability
- xtemos WoodMart
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-8097 CVE record

CVSS 5.3 Medium

WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
- xTemos Woodmart
- CWE-20
Not analysed yet 26 Jul 2025
CVE-2025-6745 CVE record

CVSS 5.3 Medium

WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
- xTemos Woodmart
- Information disclosure
Not analysed yet 11 Jul 2025
CVE-2025-6744 CVE record

CVSS 7.3 High

Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution
- xTemos Woodmart
- Code injection
Not analysed yet 8 Jul 2025
CVE-2025-6746 CVE record

CVSS 8.8 High

WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
- xTemos Woodmart
- File inclusion
Not analysed yet 8 Jul 2025
CVE-2025-6743 CVE record

CVSS 6.4 Medium

WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- xTemos Woodmart
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2023-32240 CVE record

CVSS 5.4 Medium

WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability
- Xtemos WoodMart
- Broken access control
Not analysed yet 2 Jan 2025
CVE-2024-12333 CVE record

CVSS 6.5 Medium

WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution
- xTemos Woodmart
- Code injection
Not analysed yet 12 Dec 2024
CVE-2023-25790 CVE record

CVSS 5.3 Medium

WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection
- xtemos WoodMart
- Cross-site scripting (XSS)
- Authentication bypass
Not analysed yet 24 Apr 2024
CVE-2023-41872 CVE record

CVSS 7.1 High

WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)
- Xtemos WoodMart
- Cross-site scripting (XSS)
Not analysed yet 25 Sept 2023
CVE-2023-32239 CVE record

CVSS 5.4 Medium

WordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS)
- xtemos WoodMart
- Cross-site scripting (XSS)
Not analysed yet 22 Jun 2023