Skip to content
OpenAdvisories

Vendor

Xtemos

23 known vulnerabilities.

Products

WoodMart 17 WoodMart - Multipurpose WooCommerce Theme 2 Woodmart Core 1 Basel 1 Basel Post Types 1 Hitek 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-56072

    WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.

    Xtemos WoodMart
  • High 8.1
    CVE-2026-39582

    WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

    Xtemos Hitek
  • High 8.1
    CVE-2026-23971

    WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in xtemos WoodMart woodmart allows Object Injection.This issue affects WoodMart: from n/a through <= 8.3.8.

    Xtemos WoodMart
  • High 7.5
    CVE-2025-49935

    WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a through < 8.3.2.

    Xtemos WoodMart
  • High 7.3
    CVE-2025-6744

    Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution

    The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcod…

    Xtemos WoodMart Web / CMS
  • High 8.8
    CVE-2025-6746

    WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion

    The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute…

    Xtemos WoodMart Web / CMS
  • High 7.1
    CVE-2023-41872

    WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xtemos WoodMart plugin <= 7.2.4 versions.

    Xtemos WoodMart