PT-2025-29216 · WordPress · Woodmart

Matthew Rollings · Published 2025-07-11 · Updated 2025-07-11 · CVE-2025-6745

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: WoodMart versions prior to 8.2.6

Description: The WoodMart plugin for WordPress is vulnerable to Information Exposure in versions prior to 8.2.6 due to insufficient restrictions on post inclusion within the woodmart get posts by query() function. This allows unauthenticated attackers to extract data from password-protected, private, or draft posts without authorization.

Recommendations: Update WoodMart to version 8.2.6 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-6745

Affected Products

Woodmart

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-6745 · Security Note
• https://twitter.com/CVEnew/status/1943668131697991913 · Twitter Post
• https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492 · Note
• https://t.me/cvetracker/27544 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1943599693188964621 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/3408895e-3418-4f70-8b7c-76f6ba899d11?source=cve · Note
• https://t.me/cvenotify/128505 · Telegram Post