Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WoodMart — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in WoodMart, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for WoodMart, a web application and e-commerce platform developed by Aleskot, focusing specifically on security weaknesses associated with the software. The collection covers historical security advisories and disclosed vulnerabilities identified across the product's supported versions, spanning from the initial release through the most recent updates. Readers can use this resource to track the vendor's published security notices, analyze recurring weakness classes such as cross-site scripting and authentication flaws, and review the complete vulnerability history for WoodMart to assess its long-term security posture and remediation patterns.

Vendor: xtemos

CVE ID Title CVSS Severity Published
CVE-2026-27086 WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-09-04
CVE-2026-56072 WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-26
CVE-2026-23971 WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability CWE-502 8.1 High 2026-03-25
CVE-2026-32405 WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability CWE-497 5.3 Medium 2026-03-13
CVE-2025-47600 WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability CWE-80 5.3 Medium 2026-01-22
CVE-2025-49935 WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability CWE-98 7.5 High 2025-10-22
CVE-2025-49936 WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-10-22
CVE-2025-8097 WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation CWE-20 5.3 Medium 2025-07-26
CVE-2025-6745 WoodMart <= 8.2.5 - Unauthenticated Post Disclosure CWE-200 5.3 Medium 2025-07-11
CVE-2025-6744 Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution CWE-94 7.3 High 2025-07-08
CVE-2025-6746 WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion CWE-98 8.8 High 2025-07-08
CVE-2025-6743 WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-07-08
CVE-2023-32240 WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability CWE-862 5.4 Medium 2025-01-02
CVE-2024-12333 WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution CWE-94 6.5 Medium 2024-12-12
CVE-2023-25790 WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection CWE-287 5.3 Medium 2024-04-24
CVE-2023-41872 WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High 2023-09-25
CVE-2023-32239 WordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.4 Medium 2023-06-22

All 17 known CVE vulnerabilities affecting WoodMart with full Chinese analysis, references, and POCs where available.