WoodMart WordPress Theme Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the WoodMart plugin for WordPress, affecting all versions through 8.2.5. The issue arises in the woodmart_get_posts_by_query() function, where inadequate restrictions allow unauthenticated attackers to access and extract data from password-protected, private, or draft posts that should otherwise be inaccessible.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive post data, including content from password-protected, private, or draft posts.

Remediation

Users are advised to update the WoodMart WordPress theme to version 8.2.6 or a newer patched version.