CVE-2025-6745

MEDIUM

WoodMart <= 8.2.5 - Unauthenticated Post Disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-6745 has a selected CVSS score of 5.3 (medium).

Description

The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmart_get_posts_by_query() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 11, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Woodmart

Browse xTemos / Woodmart

Default status: unaffected

CVE ListThrough 8.2.5affected

References

3