Read the docs

ThemeMove

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

ThemeMove records in CISA KEV

No ThemeMove vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Edumall 2 records LOW Makeaholic 2 records MEDIUM Minimogwp 2 records LOW Aeroland 1 record LOW Amely 1 record MEDIUM Billey 1 record LOW Brook 1 record LOW Businext 1 record LOW

Records

1 record in Amely · all components

TI-2025-26216 CVE-2025-39474 · GHSA-f5h6-2wfm-359g

WordPress Amely theme <= 3.1.4 - SQL Injection vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Amely amely allows SQL Injection.This issue affects Amely: from n/a through <= 3.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00439 Published 2025-06-27 No fix listed CWE-89
Open these records in search →