PT-2025-30965 · WordPress · Woodmart

Samir El Khaouti · CVE-2025-8097 · Published 2025-07-26 · Updated 2025-07-26

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WoodMart versions prior to 8.2.7

Description The WoodMart theme for WordPress is susceptible to improper input validation. Insufficient validation of the qty parameter within the woodmart update cart item function allows unauthenticated attackers to manipulate cart quantities using fractional values. This manipulation can result in cart totals rounding to $0.00, effectively bypassing payment requirements and enabling unauthorized acquisition of virtual or downloadable products.

Recommendations Update WoodMart to version 8.2.7 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-8097

Affected Products

Woodmart

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-8097 · Security Note
• https://twitter.com/VulmonFeeds/status/1949020526891958376 · Twitter Post
• https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/b030aa28-5310-4f69-8b86-7e0b0bae741b?source=cve · Note
• https://twitter.com/CVEnew/status/1949005806193578283 · Twitter Post