Xtemos Woodmart — known CVE vulnerabilities

Every CVE whose affected-product data names Xtemos Woodmart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-32242 — CVSS 9.8 (critical): Deserialization of Untrusted Data vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme.This issue affects WoodMart -…
• CVE-2025-6746 — CVSS 8.8 (high): The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout'…
• CVE-2025-6744 — CVSS 7.3 (high): The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3. This is…
• CVE-2023-41872 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xtemos WoodMart plugin <= 7.2.4 versions.
• CVE-2025-6743 — CVSS 6.4 (medium): The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attribute in all versions…
• CVE-2023-32500 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme <= 7.1.1 versions.