Approved changes feed: RSS · Atom
cpe:2.3:a:xtemos:woodmart:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xtemos (0fa3e09d-cf9f-5b7c-b3f6-3d2d54ae949e) |
|---|---|
| Product | Woodmart (0531d416-366e-531d-a8af-51f75e704ed6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-56072 |
vulnerable | 2026-07-29 01:00:28.857378 |
WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.
Published: 2026-06-26T14:52:54.753Z
Updated: 2026-06-26T17:43:06.782Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32405 |
vulnerable | 2026-06-08 07:57:17.533447 |
WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through <= 8.3.9.
Published: 2026-03-13T11:42:13.263Z
Updated: 2026-04-29T09:51:58.844Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23971 |
vulnerable | 2026-06-08 07:51:16.481809 |
WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability
HIGH (8.1)
Deserialization of Untrusted Data vulnerability in xtemos WoodMart woodmart allows Object Injection.This issue affects WoodMart: from n/a through <= 8.3.8.
Published: 2026-03-25T16:14:29.883Z
Updated: 2026-04-28T16:14:47.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8097 |
vulnerable | 2026-06-08 07:45:19.435100 |
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
MEDIUM (5.3)
The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6. This is due to insufficient validation of the qty parameter in the woodmart_update_cart_item function. This makes it possible for unauthenticated attackers to manipulate cart quantities using fractional values, allowing them to obtain products for free by setting extremely small quantities (e.g., 0.00001) that round cart totals to $0.00, effectively bypassing payment requirements and allowing unauthorized acquisition of virtual or downloadable products.
Published: 2025-07-26T06:43:22.481Z
Updated: 2026-04-08T17:15:50.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6746 |
vulnerable | 2026-06-08 07:43:16.178630 |
WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
HIGH (8.8)
The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php files can be uploaded and included.
Published: 2025-07-08T06:41:58.743Z
Updated: 2026-04-08T17:10:44.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6745 |
vulnerable | 2026-06-08 07:43:16.178381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6744 |
vulnerable | 2026-06-08 07:43:16.178011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6743 |
vulnerable | 2026-06-08 07:43:16.175765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49936 |
vulnerable | 2026-06-08 07:29:15.127420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49935 |
vulnerable | 2026-06-08 07:29:15.126981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47600 |
vulnerable | 2026-06-08 07:27:14.606612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12333 |
vulnerable | 2026-06-08 06:23:51.728594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41872 |
vulnerable | 2026-06-08 06:11:07.352455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32500 |
vulnerable | 2026-06-08 06:04:46.423254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32240 |
vulnerable | 2026-06-08 06:04:45.235469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32239 |
vulnerable | 2026-06-08 06:04:45.234300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25790 |
vulnerable | 2026-06-08 05:56:10.626317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.