What is CVE-2025-6745?

CVE-2025-6745 is a medium-severity vulnerability in Xtemos Woodmart, classified under Information Disclosure. CVSS score: 5.3/10. Published 2025-07-11.

How severe is CVE-2025-6745?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Xtemos Woodmart

CVE-2025-6745

The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmart_get_posts_by_query() function due to insufficient restrictions on which posts can be included. This makes…

Vulnerability class: Information Disclosure

EPSS: 0.002 (45.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Xtemos Woodmart — versions 0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

www.wordfence.com/threat-intel/vulnerabilities/id/3408895e-3418-4f70-8b7c-76f6b…
themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492

Frequently asked questions

What is CVE-2025-6745?: CVE-2025-6745 is a medium-severity vulnerability in Xtemos Woodmart, classified under Information Disclosure. CVSS score: 5.3/10. Published 2025-07-11.
How severe is CVE-2025-6745?: Medium severity. CVSS v3 base score is 5.3 out of 10.