Lucene search
K

37 matches found

CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

WordPress plugin WoodMart 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.9AI score0.00061EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.2 views

WordPress plugin WoodMart 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.3 views

CVE-2025-47600

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in xtemos WoodMart woodmart allows Code Injection.This issue affects WoodMart: from n/a through = 8.3.7...

5.3CVSS5.4AI score0.00021EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:15 p.m.1 views

CVE-2025-47600

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in xtemos WoodMart woodmart allows Code Injection.This issue affects WoodMart: from n/a through = 8.3.7...

5.3CVSS0.00021EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.2 views

WordPress plugin Woodmart has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

5.3CVSS5.9AI score0.00021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/24 2:33 p.m.3 views

CVE-2025-49936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through 8.3.2...

6.5CVSS6.4AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.3 views

EUVD-2025-35522

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through 8.3.2...

5.9AI score0.0003EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

WordPress plugin WoodMart 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.7AI score0.00117EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

WordPress plugin WoodMart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.3 views

PT-2025-43200

Name of the Vulnerable Software and Affected Versions xtemos WoodMart versions prior to 8.3.2 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of malicious...

6.5CVSS6.8AI score0.0003EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-21118

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00223EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-46363

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00083EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/26 12:0 a.m.2 views

WordPress plugin WoodMart 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

5.3CVSS6.5AI score0.00515EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/07/25 9:57 p.m.3 views

WordPress WoodMart - Multipurpose WooCommerce Theme plugin <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability

WordPress WoodMart - Multipurpose WooCommerce Theme plugin = 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability discovered by Samir El Khaouti in WordPress Theme WoodMart versions = 8.2.6...

5.3CVSS7AI score0.00515EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/13 8:8 a.m.6 views

CVE-2025-6745

The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmartgetpostsbyquery function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from...

5.3CVSS6.6AI score0.00223EPSS
Exploits0References1
NVD
NVD
added 2025/07/11 8:15 a.m.2 views

CVE-2025-6745

The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmartgetpostsbyquery function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from...

5.3CVSS0.00223EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/11 7:22 a.m.3 views

CVE-2025-6745 WoodMart <= 8.2.5 - Unauthenticated Post Disclosure

The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmartgetpostsbyquery function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from...

5.3CVSS7.2AI score0.00223EPSS
Exploits0References2
CVE
CVE
added 2025/07/11 7:22 a.m.29 views

CVE-2025-6745

CVE-2025-6745 concerns the WoodMart WordPress plugin (versions ≤ 8.2.5). The issue is information exposure through woodmart_get_posts_by_query(), caused by insufficient restrictions on which posts can be included, allowing unauthenticated attackers to access data from password‑protected, private,...

5.3CVSS6.7AI score0.00223EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/11 12:0 a.m.2 views

WordPress plugin WoodMart 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.3CVSS5.9AI score0.00223EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/07/10 7:24 a.m.4 views

CVE-2025-6746

The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server,...

8.8CVSS8AI score0.00404EPSS
Exploits0References1
Rows per page
Query Builder