Read the docs

xtemos

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

xtemos records in CISA KEV

No xtemos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woodmart 6 records MEDIUM Woodmart Theme 1 record LOW

Records

22 records

TI-2023-15542 CVE-2023-32244 · GHSA-rpgm-gh3j-mpfh

WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation

Priority MEDIUM 50

Improper Privilege Management vulnerability in xtemos Woodmart Core allows Privilege Escalation.This issue affects Woodmart Core: from n/a through 1.0.36.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00789 Published 2024-05-17 No fix listed CWE-269
TI-2023-15540 CVE-2023-32242 · GHSA-8rvj-w5g5-prc2

WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection

Priority MEDIUM 43

Deserialization of Untrusted Data vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme.This issue affects WoodMart - Multipurpose WooCommerce Theme: from n/a through 1.0.36.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00798 Published 2023-12-21 No fix listed CWE-502
TI-2025-31850 CVE-2025-49935 · GHSA-9r69-f28j-93c2

WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a thro…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00477 Published 2025-10-22 No fix listed CWE-98
TI-2026-24933 CVE-2026-32405 · GHSA-w59g-5675-pp8h

WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through <= 8.3.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2026-03-13 No fix listed CWE-497
TI-2025-41322 CVE-2025-67568 · GHSA-wh25-mmxh-64f6

WordPress Basel theme <= 5.9.1 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Basel: from n/a through <= 5.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00247 Published 2025-12-09 No fix listed CWE-862
TI-2025-30097 CVE-2025-47600 · GHSA-vxxf-3mv8-7w36

WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in xtemos WoodMart woodmart allows Code Injection.This issue affects WoodMart: from n/a through <= 8.3.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00372 Published 2026-01-22 No fix listed CWE-80
TI-2025-07407 CVE-2025-8097 · GHSA-qrc2-mj9g-ghm5

Improper input validation in xtemos Woodmart

Priority LOW 30

The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2025-07-26 No fix listed CWE-20
TI-2025-06126 CVE-2025-6745 · GHSA-g2cm-jpxr-g8w3

WoodMart <= 8.2.5 - Unauthenticated Post Disclosure

Priority LOW 30

The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmart_get_posts_by_query() function due to insufficient restrictions on which posts can be in…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00293 Published 2025-07-11 No fix listed CWE-200
TI-2025-31851 CVE-2025-49936 · GHSA-hfq2-ggw4-3493

WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through < 8.3.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00217 Published 2025-10-22 No fix listed CWE-79
TI-2025-06124 CVE-2025-6743 · GHSA-g65g-qvx5-phg2

WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attribute in all versions up to, and including, 8.2.3 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00198 Published 2025-07-08 No fix listed CWE-79
TI-2023-11061 CVE-2023-25790 · GHSA-39g4-3hvr-5rhm

WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection

Priority LOW 25

Improper Authentication, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart allows Cross-Site Scripting (XSS).This issue affects WoodMart: from n/a throu…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00523 Published 2024-04-24 No fix listed CWE-287
TI-2023-15538 CVE-2023-32240 · GHSA-gccm-257v-26xf

WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Xtemos WoodMart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WoodMart: from n/a through 7.2.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00281 Published 2025-01-02 No fix listed CWE-862
Open these records in search →