https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:30:21.511488+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287306 EUVD-2026-287306 2026-10-05T07:30:21.559882+00:00 EUVD-2026-287306 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8097 fkie_cve-2025-8097 2026-10-05T07:30:21.559920+00:00

The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6. This is due to insufficient validation of the qty parameter in the woodmart_update_cart_item function. This makes it possible for unauthenticated attackers to manipulate cart quantities using fractional values, allowing them to obtain products for free by setting extremely small quantities (e.g., 0.00001) that round cart totals to $0.00, effectively bypassing payment requirements and allowing unauthorized acquisition of virtual or downloadable products.

 https://cve.radiocsirt.org/vuln/ghsa-qrc2-mj9g-ghm5 GHSA-qrc2-mj9g-ghm5 2026-10-05T07:30:21.559956+00:00

The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6. This is due to insufficient validation of the qty parameter in the woodmart_update_cart_item function. This makes it possible for unauthenticated attackers to manipulate cart quantities using fractional values, allowing them to obtain products for free by setting extremely small quantities (e.g., 0.00001) that round cart totals to $0.00, effectively bypassing payment requirements and allowing unauthorized acquisition of virtual or downloadable products.