CVE-2025-6744

HIGH

Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-6744 has a selected CVSS score of 7.3 (high).

Description

The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode through the woodmart_get_products_shortcode() function. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 8, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Woodmart

Browse xTemos / Woodmart

Default status: unaffected

CVE ListThrough 8.2.3affected

References

3