PT-2025-28362 · WordPress · Woodmart

Matthew Rollings

·

Published

2025-07-08

·

Updated

2025-07-08

·

CVE-2025-6744

CVSS v3.1
7.3
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

Woodmart theme for WordPress versions up to and including 8.2.3

Description:

The issue arises from the software allowing users to execute an action that does not properly validate a value before running do shortcode through the `woodmart get products shortcode()` function. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Recommendations:

For versions up to and including 8.2.3, update to a version higher than 8.2.3 to resolve the issue.

As a temporary workaround, consider restricting access to the `woodmart get products shortcode()` function until a patch is available.

Fix

Code Injection

Weakness Enumeration

Related Identifiers

CVE-2025-6744

Affected Products

Woodmart