Woodmart vulnerabilities

Theme slug woodmart · 19 known vulnerabilities · latest disclosed 2026-09-04 · WordPress.org page

Every listed vulnerability has a fix. Version 8.5.4 or later is not affected by any of them. If your site runs an older version, update it.

5 of 19 rated high or critical (CVSS 7 or more).

Known vulnerabilities in Woodmart

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 6.4< 8.3.88.3.8CVE-2026-270862026-09-04Advisory
High 7.2<= 8.5.38.5.4CVE-2026-560722026-06-25Advisory
High 8.1<= 8.3.88.3.9CVE-2026-239712026-03-23Advisory
Medium 5.3<= 8.3.98.4.0CVE-2026-324052026-02-22Advisory
Medium 6.5<= 8.3.78.3.8CVE-2025-476002026-01-09Advisory
High 7.5< 8.3.28.3.2CVE-2025-499352025-10-14Advisory
Medium 6.4< 8.3.28.3.2CVE-2025-499362025-10-10Advisory
Medium 5.3<= 8.2.68.2.7CVE-2025-80972025-07-25Advisory
Medium 5.3<= 8.2.58.2.6CVE-2025-67452025-07-10Advisory
Medium 6.4<= 8.2.38.2.4CVE-2025-67432025-07-07Advisory
High 8.8<= 8.2.38.2.4CVE-2025-67462025-07-07Advisory
High 7.3<= 8.2.38.2.4CVE-2025-67442025-07-07Advisory
Medium 6.5<= 8.0.38.0.4CVE-2024-123332024-12-11Advisory
Medium 6.1<= 7.2.47.2.5CVE-2023-418722023-09-05Advisory
Medium 4.3<= 7.2.17.2.2CVE-2023-322402023-05-11Advisory
Medium 6.4<= 7.2.17.2.2CVE-2023-322392023-05-11Advisory
Medium 6.5<= 7.1.17.1.2CVE-2023-325002023-03-01Advisory
Medium 6.5<= 7.1.17.1.2CVE-2023-257902023-03-01Advisory
Medium 5.3<= 7.0.47.1.1CVE-2023-257902023-02-16Advisory

Check if a site is affected

Enter a site address to see which version of Woodmart and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the Woodmart theme safe to use?

All 19 known issues are fixed in current versions (8.5.4 or later). Keeping it updated is what matters.

How do I check which version of Woodmart my site runs?

In WordPress go to Appearance > Themes. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable theme?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome