Woodmart

woodmart

Vulnerabilities:

13

Last Updated:

February 28, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-01-09
Title
WoodMart < 8.3.8 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.3.8
CVSS
6.5 (medium)
Published
2025-10-14
Title
WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 8.3.2
CVSS
7.5 (high)
Published
2025-10-10
Title
WoodMart < 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.3.2
CVSS
6.4 (medium)
Published
2025-07-25
Title
WoodMart < 8.2.7 - Unauthenticated Cart Manipulation
Fixed in
Fixed in 8.2.7
CVSS
5.3 (medium)
Published
2025-07-10
Title
WoodMart < 8.2.6 - Unauthenticated Post Disclosure
Fixed in
Fixed in 8.2.6
CVSS
5.3 (medium)
Published
2025-07-07
Title
WoodMart < 8.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.2.4
CVSS
6.4 (medium)
Published
2025-07-07
Title
WoodMart < 8.2.4 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 8.2.4
CVSS
8.8 (high)
Published
2025-07-07
Title
Woodmart < 8.2.4 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.2.4
CVSS
7.3 (high)
Published
2024-12-11
Title
WoodMart < 8.0.4 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.0.4
CVSS
6.5 (medium)
Published
2023-09-25
Title
WoodMart < 7.2.5 - Reflected XSS
Fixed in
Fixed in 7.2.5
CVSS
7.1 (high)
Published
2023-05-11
Title
WoodMart < 7.2.2 - Subscriber+ Stored XSS
Fixed in
Fixed in 7.2.2
CVSS
8.0 (high)
Published
2023-02-28
Title
WoodMart < 7.1.2 - License Update/Deactivation via CSRF
Fixed in
Fixed in 7.1.2
CVSS
4.3 (medium)
Published
2023-02-16
Title
WoodMart < 7.1.2 - Unauthenticated Arbitrary Shortcode Injection
Fixed in
Fixed in 7.1.2
CVSS
7.5 (high)