PT-2024-12075 · Xtemos · Xtemos Woodmart

Name of the Vulnerable Software and Affected Versions: xtemos WoodMart versions n/a through 7.0.4 Description: The issue affects the xtemos WoodMart, allowing for Cross-Site Scripting XSS due to improper authentication and neutralization of input during web page generation. Recommendations: For...

CVE-2023-32242

Deserialization of Untrusted Data vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme.This issue affects WoodMart - Multipurpose WooCommerce Theme: from n/a through 1.0.36...

CVE-2023-32500

Cross-Site Request Forgery CSRF vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme = 7.1.1 versions...

CVE-2023-32500

Cross-Site Request Forgery CSRF vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme = 7.1.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme = 7.1.1 versions...

CVE-2023-32500 WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme = 7.1.1 versions...

CVE-2023-32500

The CVE-2023-32500 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme, affected versions

PT-2023-23834 · Xtemos · Woodmart - Multipurpose Woocommerce Theme

Name of the Vulnerable Software and Affected Versions: xtemos WoodMart - Multipurpose WooCommerce Theme versions = 7.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that...

CVE-2023-41872

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Xtemos WoodMart plugin = 7.2.4 versions...

CVE-2023-41872

CVE-2023-41872: Unauthenticated Reflected Cross-Site Scripting in WoodMart (Xtemos) WordPress WoodMart Theme/Plugin

PT-2023-28133 · Xtemos · Xtemos Woodmart

Name of the Vulnerable Software and Affected Versions: Xtemos WoodMart plugin versions prior to 7.2.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing the...

CVE-2023-32239

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in xtemos WoodMart theme = 7.2.1 versions...

CVE-2023-32239

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in xtemos WoodMart theme = 7.2.1 versions...

Cross site scripting

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in xtemos WoodMart theme = 7.2.1 versions...

CVE-2023-32239

CVE-2023-32239: WoodMart theme for WordPress (xtemos) versions

PT-2023-23679 · Xtemos · Xtemos Woodmart Theme

Name of the Vulnerable Software and Affected Versions: xtemos WoodMart theme versions prior to 7.2.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users, specifically those with subscriber or higher privileges. This vulnerability...

WordPress WoodMart Theme <= 7.2.1 is vulnerable to Broken Access Control

Software WoodMart Type Theme Vulnerable versions = 7.2.1 Fixed in 7.2.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32240 Patch priority Medium CVSS severity Medium 5.4 Developer Xtemos PSID b409a147912c Credits Dave Jong Patchstack Required privilege...

WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to Privilege Escalation

Software Woodmart Core Type Plugin Vulnerable versions = 1.0.36 Fixed in 1.0.37 OWASP Top 10 A2: Broken Authentication Classification Privilege Escalation CVE CVE-2023-32244 Patch priority High CVSS severity High 9.8 Developer Xtemos PSID a0b94835d329 Credits Dave Jong Patchstack Required privile...

WordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WoodMart Type Theme Vulnerable versions = 7.2.1 Fixed in 7.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32239 Patch priority Medium CVSS severity Medium 5.4 Developer Xtemos PSID 157d641b350c Credits Dave Jong Patchstack Required...

WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection

Software Woodmart Core Type Plugin Vulnerable versions = 1.0.36 Fixed in 1.0.37 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-32242 Patch priority High CVSS severity High 9.8 Developer Xtemos PSID 779c53b2f97f Credits Dave Jong Patchstack Required privilege...