PatchTheCVEwoodmart vulnerabilities and fixes
Recent CVEs affecting woodmart, with upgrade or downgrade steps. 3 tracked.
woodmart has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-07-08. Highest priority: CVE-2025-6746 (score 42/100).
- CVE-2025-6746 HIGH 8.8 UPGRADE The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,
- CVE-2025-6744 HIGH 7.3 UPGRADE The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and
- CVE-2025-6743 MEDIUM 6.4 UPGRADE The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_marke
FAQ
How do I fix woodmart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is woodmart being exploited right now?
None of the tracked woodmart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which woodmart CVE should I patch first?
CVE-2025-6746 currently ranks highest (42/100): The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, .