Medium · 6.5 CVE-2026-27086 EUVD-2026-70980GHSA-j325-4h26-xg44

WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability

Published Sep 4, 2026 · Updated Sep 7, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS.

This issue affects WoodMart: from n/a before 8.3.8.

Vendor	Product	Affected	Fixed
Xtemos	WoodMart	< 8.3.8	8.3.8