← All advisories

Medium severity6.5NVD Advisory· Published Sep 4, 2026· Updated Sep 7, 2026

CVE-2026-27086

CVE-2026-27086

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS.

This issue affects WoodMart: from n/a before 8.3.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Woodmartllm-fuzzy
Range: <8.3.8
Package: https://wordpress.org/plugins/woodmart

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/woodmart/vulnerability/wordpress-woodmart-theme-8-3-8-cross-site-scripting-xss-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)
Wordfence Blog · Sep 10, 2026