Improper Input Validation Vulnerability in WoodMart Theme for WordPress

CVE-2025-8097

What is CVE-2025-8097?

The WoodMart theme for WordPress has a vulnerability that arises from improper input validation. This flaw exists in the woodmart_update_cart_item function, specifically related to the qty parameter. Due to insufficient validation, unauthenticated attackers can exploit this vulnerability to manipulate the cart quantities with fractional values. This manipulation enables attackers to set quantities to minuscule amounts, such as 0.00001, which can inadvertently round the cart totals to $0.00. Consequently, this allows unauthorized users to acquire virtual or downloadable products without any payment.

References