Approved changes feed: RSS · Atom
cpe:2.3:a:xtemos:woodmart:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xtemos (0fa3e09d-cf9f-5b7c-b3f6-3d2d54ae949e) |
|---|---|
| Product | Woodmart (0531d416-366e-531d-a8af-51f75e704ed6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27086 |
vulnerable | 2026-09-16 04:33:43.218957 |
WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS.
This issue affects WoodMart: from n/a before 8.3.8.
Published: 2026-09-04T09:22:57.652Z
Updated: 2026-09-07T11:17:27.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56072 |
vulnerable | 2026-07-29 01:00:28.857378 |
WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.
Published: 2026-06-26T14:52:54.753Z
Updated: 2026-06-26T17:43:06.782Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32405 |
vulnerable | 2026-06-08 07:57:17.533447 |
WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through <= 8.3.9.
Published: 2026-03-13T11:42:13.263Z
Updated: 2026-04-29T09:51:58.844Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23971 |
vulnerable | 2026-06-08 07:51:16.481809 |
WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability
HIGH (8.1)
Deserialization of Untrusted Data vulnerability in xtemos WoodMart woodmart allows Object Injection.This issue affects WoodMart: from n/a through <= 8.3.8.
Published: 2026-03-25T16:14:29.883Z
Updated: 2026-04-28T16:14:47.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8097 |
vulnerable | 2026-06-08 07:45:19.435100 |
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
MEDIUM (5.3)
The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6. This is due to insufficient validation of the qty parameter in the woodmart_update_cart_item function. This makes it possible for unauthenticated attackers to manipulate cart quantities using fractional values, allowing them to obtain products for free by setting extremely small quantities (e.g., 0.00001) that round cart totals to $0.00, effectively bypassing payment requirements and allowing unauthorized acquisition of virtual or downloadable products.
Published: 2025-07-26T06:43:22.481Z
Updated: 2026-04-08T17:15:50.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6746 |
vulnerable | 2026-06-08 07:43:16.178630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6745 |
vulnerable | 2026-06-08 07:43:16.178381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6744 |
vulnerable | 2026-06-08 07:43:16.178011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6743 |
vulnerable | 2026-06-08 07:43:16.175765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49936 |
vulnerable | 2026-06-08 07:29:15.127420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49935 |
vulnerable | 2026-06-08 07:29:15.126981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47600 |
vulnerable | 2026-06-08 07:27:14.606612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12333 |
vulnerable | 2026-06-08 06:23:51.728594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41872 |
vulnerable | 2026-06-08 06:11:07.352455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32500 |
vulnerable | 2026-06-08 06:04:46.423254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32240 |
vulnerable | 2026-06-08 06:04:45.235469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32239 |
vulnerable | 2026-06-08 06:04:45.234300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25790 |
vulnerable | 2026-06-08 05:56:10.626317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.