Skip to content
OpenAdvisories

Vendor

Xtemos

23 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-89324 Public exploit

    Basel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback Salt

    The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. The vulnerability exists because a missing-quotes coding error in the defined() call for SECURE_AUTH_SALT inside BASEL_Auth::get_confi…

  • Critical 9.8

    WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation

    Improper Privilege Management vulnerability in xtemos Woodmart Core allows Privilege Escalation.This issue affects Woodmart Core: from n/a through 1.0.36.

  • Critical 9.8

    WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme.This issue affects WoodMart - Multipurpose WooCommerce Theme: from n/a through 1.0.36.