Thememove

26 CVEs across 22 Thememove products. Browse Thememove vulnerabilities, severities, and proof-of-concept exploits.

Thememove products with known CVEs

ProductCVEs
Edumall3
Unicamp3
Billey2
Brook2
Makeaholic2
Minimogwp2
Minimogwp – The High Converting Ecommerce Wordpress Theme2
Aeroland1
Amely1
Atomlab1
Businext1
Edumall - Professional Lms Education Center Wordpress Theme1
Healsoul1
Insight Core1
Learts Addons1
Maxcoach1
Medizin1
Mitech1
Moody1
Quickcal - Appointment Booking Calendar For Wordpress1
Smilepure1
Thememove Core1
Thememove CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57797Medium4.32026-07-13Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edu…
CVE-2026-57791High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows PHP Local…
CVE-2026-57790High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Loc…
CVE-2025-69094High8.52026-07-02Subscriber SQL Injection in Unicamp <= 2.2.2 versions.
CVE-2026-39590High8.12026-06-17Unauthenticated Local File Inclusion in Atomlab <= 2.4.5 versions.
CVE-2026-25027High7.52026-02-03Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP L…
CVE-2025-22708High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Mitech mitech allows PHP Loc…
CVE-2025-22707High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Moody tm-moody allows PHP Lo…
CVE-2025-14430High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows PHP Local…
CVE-2025-14429High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove AeroLand aeroland allows PHP…
CVE-2025-60069High8.12025-12-18Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MinimogWP minimog allows PHP…
CVE-2025-68062High7.52025-12-16Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MinimogWP minimog allows PHP…
CVE-2025-68061High7.52025-12-16Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove EduMall edumall allows PHP L…
CVE-2025-59564High8.12025-10-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove EduMall edumall allows PHP L…
CVE-2025-59558High8.12025-10-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Loc…
CVE-2025-59557Critical9.32025-10-22Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Learts Addons learts-addons allows SQL Injectio…
CVE-2025-59555High8.12025-10-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Medizin medizin allows PHP L…
CVE-2025-58967High8.12025-10-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Businext businext allows PHP…
CVE-2025-58958High8.12025-10-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove SmilePure smilepure allows P…
CVE-2025-53303High8.82025-09-09Deserialization of Untrusted Data vulnerability in ThemeMove ThemeMove Core thememove-core allows Object Injection.This issue affects ThemeMove Core: from n/a…
CVE-2025-58206High8.12025-09-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MaxCoach maxcoach allows PHP…
CVE-2025-58210Medium5.32025-09-03Missing Authorization vulnerability in ThemeMove Makeaholic makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2025-54701High8.12025-08-14Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP L…
CVE-2025-54700High8.12025-08-14Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaholic allows…
CVE-2025-8198High7.52025-07-26The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9…
CVE-2025-39474Critical9.32025-06-27Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Amely amely allows SQL Injection.This issue aff…
CVE-2025-32309High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Healsoul healsoul allows PHP…
CVE-2025-32310High8.82025-05-16Cross-Site Request Forgery (CSRF) vulnerability in ThemeMove QuickCal - Appointment Booking Calendar for WordPress quickcal allows Privilege Escalation.This is…
CVE-2025-2101High8.12025-04-26The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_…
CVE-2024-13790Critical9.82025-03-19The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3…
CVE-2021-24950Medium5.42022-03-14The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authen…