Volerion logoVolerion
Volerion logoVolerion

Xtemos WoodMart Theme Cross-Site Scripting Vulnerability

Vulnerability

A cross-site scripting vulnerability allowing code injection has been identified in the Xtemos WoodMart WordPress theme, affecting versions through 8.3.7. This vulnerability arises from improper neutralization of script-related HTML tags, which could enable malicious actors to inject content, potentially including phishing pages, into the website's posts and pages.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected WordPress site.

Remediation

Users of the Xtemos WoodMart WordPress theme should update to version 8.3.8 or later to address this vulnerability.

Added: Jan 22, 2026, 6:57 PM
Updated: Jan 22, 2026, 6:57 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
1.7
exploitability
6.5
remediation
7.7
relevance
2.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.