CVE-2025-6745: WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmartgetpostsbyquery() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6745?
The severity of CVE-2025-6745 is classified as a medium risk due to potential information exposure.
How do I fix CVE-2025-6745?
To fix CVE-2025-6745, update the WoodMart plugin to version 8.2.6 or later.
Who is affected by CVE-2025-6745?
CVE-2025-6745 affects all versions of the WoodMart plugin up to and including 8.2.5.
What type of vulnerability is CVE-2025-6745?
CVE-2025-6745 is an Information Exposure vulnerability.
Can unauthenticated users exploit CVE-2025-6745?
Yes, unauthenticated attackers can exploit CVE-2025-6745 due to insufficient restrictions on post access.