Log in Start free

Xtemos

Products

ProductCVEsExploitedLatest
WoodMart17–Sep 4, 2026
WoodMart - Multipurpose WooCommerce Theme2–Dec 21, 2023
Basel1–Dec 9, 2025
Hitek1–Jun 17, 2026
Woodmart Core1–May 17, 2024

Exploited and recent CVEs

  • CVE-2026-27086 Medium 6.5 WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-56072 High 7.1 WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-39582 High 8.1 WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-23971 High 8.1 WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-32405 Medium 5.3 WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-47600 Medium 5.3 WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability 0.4%
  • CVE-2025-67568 Medium 5.3 WordPress Basel theme <= 5.9.1 - Broken Access Control vulnerability 0.2%
  • CVE-2025-49936 Medium 6.5 WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49935 High 7.5 WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-8097 Medium 5.3 WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation 0.4%
  • CVE-2025-6745 Medium 5.3 WoodMart <= 8.2.5 - Unauthenticated Post Disclosure 0.3%
  • CVE-2025-6744 High 7.3 Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution 0.5%
  • CVE-2025-6746 High 8.8 WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion 0.5%
  • CVE-2025-6743 Medium 6.4 WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2023-32240 Medium 5.4 WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability 0.3%
  • CVE-2024-12333 Medium 6.5 WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution 0.4%
  • CVE-2023-32244 Critical 9.8 WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation 0.8%
  • CVE-2023-25790 Medium 5.3 WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection 0.5%
  • CVE-2023-32242 Critical 9.8 WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection 0.8%
  • CVE-2023-32500 Medium 5.4 WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-41872 High 7.1 WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-32239 Medium 5.4 WordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%