WordSec
WordSec

Woodmart

Explore Woodmart vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891016.02.2023Today16.02.20235.3Woodmart <= 7.0.4 - Unauthenticated Arbitrary Content Injection CVSS 5.3 · 16.02.202301.03.20236.5WoodMart <= 7.1.1 - Missing Authorization to Shortcode Injection CVSS 6.5 · 01.03.20236.5Woodmart <= 7.1.1 - Cross-Site Request Forgery to License Update CVSS 6.5 · 01.03.202311.05.20234.3WoodMart <= 7.2.1 - Missing Authorization CVSS 4.3 · 11.05.20236.4WoodMart <= 7.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 6.4 · 11.05.202305.09.20236.1WoodMart <= 7.2.4 - Reflected Cross-Site Scripting CVSS 6.1 · 05.09.202311.12.20246.5WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution CVSS 6.5 · 11.12.202407.07.20257.3Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 07.07.20258.8WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion CVSS 8.8 · 07.07.20256.4WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 07.07.202510.07.20255.3WoodMart <= 8.2.5 - Unauthenticated Post Disclosure CVSS 5.3 · 10.07.202525.07.20255.3WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation CVSS 5.3 · 25.07.202510.10.20256.4WoodMart < 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.10.202514.10.20257.5WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion CVSS 7.5 · 14.10.202509.01.20266.5WoodMart <= 8.3.7 - Unauthenticated Arbitrary Shortcode Execution CVSS 6.5 · 09.01.202622.02.20265.3WoodMart <= 8.3.9 - Unauthenticated Sensitive Information Exposure CVSS 5.3 · 22.02.202623.03.20268.1Woodmart <= 8.3.8 - Unauthenticated PHP Object Injection CVSS 8.1 · 23.03.202625.06.20267.2Woodmart <= 8.5.3 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 25.06.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

18

Get automatic notifications for all Woodmart vulnerabilities before they are exploited.

Vulnerability Records

18 records
2026-06-25 00:00
Woodmart <= 8.5.3 - Unauthenticated Stored Cross-Site Scripting
Woodmart
<= 8.5.3
CVE-2026-56072
7.2
High
darooYes
2026-03-23 00:00
Woodmart <= 8.3.8 - Unauthenticated PHP Object Injection
Woodmart
<= 8.3.8
CVE-2026-23971
8.1
High
Phat RiOYes
2026-02-22 00:00
WoodMart <= 8.3.9 - Unauthenticated Sensitive Information Exposure
Woodmart
<= 8.3.9
CVE-2026-32405
5.3
Medium
Phat RiOYes
2026-01-09 00:00
WoodMart <= 8.3.7 - Unauthenticated Arbitrary Shortcode Execution
Woodmart
<= 8.3.7
CVE-2025-47600
6.5
Medium
João Pedro Soares de AlcântaraYes
2025-10-14 00:00
WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion
Woodmart
< 8.3.2
CVE-2025-49935
7.5
High
João Pedro Soares de AlcântaraYes
2025-10-10 00:00
WoodMart < 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woodmart
< 8.3.2
CVE-2025-49936
6.4
Medium
João Pedro Soares de AlcântaraYes
2025-07-25 00:00
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
Woodmart
<= 8.2.6
CVE-2025-8097
5.3
Medium
Samir El KhaoutiYes
2025-07-10 00:00
WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
Woodmart
<= 8.2.5
CVE-2025-6745
5.3
Medium
stealthcopterYes
2025-07-07 17:26
WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woodmart
<= 8.2.3
CVE-2025-6743
6.4
Medium
stealthcopterYes
2025-07-07 17:24
WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
Woodmart
<= 8.2.3
CVE-2025-6746
8.8
High
stealthcopterYes
Showing 1–10 of 18 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C