What’s Vulnerable › Products

xtemos WoodMart vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your xtemos WoodMart version is affected

Latest xtemos WoodMart vulnerabilities

• CVE-2026-27086 — WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-56072 — WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-23971 — WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability (CVSS 8.1)
• CVE-2026-32405 — WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2025-47600 — WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability (CVSS 5.3)
• CVE-2025-49936 — WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-49935 — WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2025-8097 — WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation (CVSS 5.3)
• CVE-2025-6745 — WoodMart <= 8.2.5 - Unauthenticated Post Disclosure (CVSS 5.3)
• CVE-2025-6744 — Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
• CVE-2025-6746 — WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8)
• CVE-2025-6743 — WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-32240 — WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2024-12333 — WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5)
• CVE-2023-25790 — WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection (CVSS 5.3)
• CVE-2023-32242 — WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection (CVSS 9.8)
• CVE-2023-32500 — WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-41872 — WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)