Thememove vulnerabilities

Products

• Edumall 4
• Quickcal - Appointment Booking Calendar For Wordpress 3
• Unicamp 3
• Billey 2
• Brook 2
• Makeaholic 2
• Minimogwp 2
• Minimogwp – The High Converting Ecommerce Wordpress Theme 2

Newest

• thememove edumall WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-39748 7.1 HighOctober 6, 2026
• axiomthemes quickcal - appointment booking calendar for wordpress WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability CVE-2026-27377 6.7 MediumJuly 23, 2026
• thememove edumall WordPress EduMall theme <= 4.5.1 - Broken Access Control vulnerability CVE-2026-57797 4.3 MediumJuly 13, 2026
• thememove brook WordPress Brook theme <= 2.9.0 - Local File Inclusion vulnerability CVE-2026-57791 7.5 HighJuly 13, 2026
• thememove billey WordPress Billey theme <= 2.1.8 - Local File Inclusion vulnerability CVE-2026-57790 7.5 HighJuly 13, 2026
• thememove unicamp WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability CVE-2025-69094 8.5 HighJuly 2, 2026
• thememove atomlab WordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability CVE-2026-39590 8.1 HighJune 17, 2026
• thememove unicamp WordPress Unicamp theme <= 2.7.1 - Local File Inclusion vulnerability CVE-2026-25027 7.5 HighFebruary 3, 2026
• thememove mitech WordPress Mitech theme <= 2.3.4 - Local File Inclusion vulnerability CVE-2025-22708 8.1 HighJanuary 8, 2026
• thememove moody WordPress Moody theme <= 2.7.3 - Local File Inclusion vulnerability CVE-2025-22707 8.1 HighJanuary 8, 2026
• thememove brook WordPress Brook - Agency Business Creative theme <= 2.9.0 - Local File Inclusion vulnerability CVE-2025-14430 8.1 HighJanuary 8, 2026
• thememove aeroland WordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerability CVE-2025-14429 8.1 HighJanuary 8, 2026
• thememove minimogwp WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability CVE-2025-60069 8.1 HighDecember 18, 2025
• thememove minimogwp WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability CVE-2025-68062 7.5 HighDecember 16, 2025
• thememove edumall WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerability CVE-2025-68061 7.5 HighDecember 16, 2025
• thememove edumall WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability CVE-2025-59564 8.1 HighOctober 22, 2025
• thememove billey WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability CVE-2025-59558 8.1 HighOctober 22, 2025
• thememove learts addons WordPress Learts Addons Plugin < 1.7.5 - SQL Injection Vulnerability CVE-2025-59557 9.3 CriticalOctober 22, 2025
• thememove medizin WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability CVE-2025-59555 8.1 HighOctober 22, 2025
• thememove businext WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability CVE-2025-58967 8.1 HighOctober 22, 2025
• thememove smilepure WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability CVE-2025-58958 8.1 HighOctober 22, 2025
• thememove core WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability CVE-2025-53303 8.8 HighSeptember 9, 2025
• thememove maxcoach WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability CVE-2025-58206 8.1 HighSeptember 5, 2025
• thememove makeaholic WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability CVE-2025-58210 5.3 MediumSeptember 3, 2025
• thememove unicamp WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability CVE-2025-54701 8.1 HighAugust 14, 2025
• thememove makeaholic WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability CVE-2025-54700 8.1 HighAugust 14, 2025
• thememove minimogwp – the high converting ecommerce wordpress theme MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation CVE-2025-8198 7.5 HighJuly 26, 2025
• thememove amely WordPress Amely theme <= 3.1.4 - SQL Injection vulnerability CVE-2025-39474 9.3 CriticalJune 27, 2025
• thememove healsoul WordPress Healsoul theme <= 2.2.3 - Local File Inclusion Vulnerability CVE-2025-32309 8.1 HighMay 23, 2025
• thememove quickcal - appointment booking calendar for wordpress WordPress QuickCal plugin <= 1.0.15 - Sensitive Data Exposure Vulnerability CVE-2025-32299 4.3 MediumMay 16, 2025
• thememove quickcal - appointment booking calendar for wordpress WordPress QuickCal plugin <= 1.0.15 - CSRF to Privilege Escalation vulnerability CVE-2025-32310 8.8 HighMay 16, 2025
• thememove edumall - professional lms education center wordpress theme Edumall <= 4.2.4 - Unauthenticated Local File Inclusion CVE-2025-2101 8.1 HighApril 26, 2025
• thememove minimogwp – the high converting ecommerce wordpress theme MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion CVE-2024-13790 9.8 CriticalMarch 19, 2025
• thememove insight core Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSS CVE-2021-24950 5.4 MediumMarch 14, 2022