Log in Start free

ThemeMove

Products

ProductCVEsExploitedLatest
EduMall4–Oct 6, 2026
Unicamp3–Jul 2, 2026
Brook2–Jul 13, 2026
Makeaholic2–Sep 3, 2025
Billey2–Jul 13, 2026
MinimogWP2–Dec 18, 2025
MinimogWP – The High Converting eCommerce WordPress Theme2–Jul 26, 2025
EduMall - Professional LMS Education Center WordPress Theme1–Apr 26, 2025
Healsoul1–May 23, 2025
Learts Addons1–Oct 22, 2025
AeroLand1–Jan 8, 2026
MaxCoach1–Sep 5, 2025
Medizin1–Oct 22, 2025
ThemeMove Core1–Sep 9, 2025
Amely1–Jun 27, 2025
Mitech1–Jan 8, 2026
Moody1–Jan 8, 2026
QuickCal - Appointment Booking Calendar for WordPress1–May 16, 2025
SmilePure1–Oct 22, 2025
Businext1–Oct 22, 2025
Atomlab1–Jun 17, 2026

Exploited and recent CVEs

  • CVE-2026-39748 High 7.1 WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57797 Medium 4.3 WordPress EduMall theme <= 4.5.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57791 High 7.5 WordPress Brook theme <= 2.9.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57790 High 7.5 WordPress Billey theme <= 2.1.8 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-69094 High 8.5 WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability 0.4%
  • CVE-2026-39590 High 8.1 WordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-25027 High 7.5 WordPress Unicamp theme <= 2.7.1 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-22708 High 8.1 WordPress Mitech theme <= 2.3.4 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-22707 High 8.1 WordPress Moody theme <= 2.7.3 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-14430 High 8.1 WordPress Brook - Agency Business Creative theme <= 2.9.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-14429 High 8.1 WordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-60069 High 8.1 WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-68062 High 7.5 WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-68061 High 7.5 WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-59564 High 8.1 WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-59558 High 8.1 WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-59557 Critical 9.3 WordPress Learts Addons Plugin < 1.7.5 - SQL Injection Vulnerability 0.4%
  • CVE-2025-59555 High 8.1 WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-58967 High 8.1 WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-58958 High 8.1 WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-53303 High 8.8 WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability 0.4%
  • CVE-2025-58206 High 8.1 WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-58210 Medium 5.3 WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-54701 High 8.1 WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-54700 High 8.1 WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-8198 High 7.5 MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation 0.4%
  • CVE-2025-39474 Critical 9.3 WordPress Amely theme <= 3.1.4 - SQL Injection vulnerability 0.4%
  • CVE-2025-32309 High 8.1 WordPress Healsoul theme <= 2.2.3 - Local File Inclusion Vulnerability 0.8%
  • CVE-2025-32310 High 8.8 WordPress QuickCal plugin <= 1.0.15 - CSRF to Privilege Escalation vulnerability 0.3%
  • CVE-2025-2101 High 8.1 Edumall <= 4.2.4 - Unauthenticated Local File Inclusion 0.9%