CVE-2025-49936

MediumCVSS 6.5

Published: 22/10/2025(UTC)Updated: 23/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

DOM-Based XSS vulnerability in WoodMart theme before version 8.3.2. An attacker can exploit it to execute a script in the victim's browser.

Risk Assessment

Risk of data theft, session hijacking, or unauthorized actions in the user's context.

Recommendation

Update the WoodMart theme to version 8.3.2 or later.

Other vulnerabilities in WoodMart

CVE-2026-27086Medium
DOM-Based XSS vulnerability in the WoodMart theme by Xtemos. Improper neutralization of input during web page generation. Affects versions before 8.3.8.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through < 8.3.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS