Read the docs

ThemeMove

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

ThemeMove records in CISA KEV

No ThemeMove vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Edumall 2 records LOW Makeaholic 2 records MEDIUM Minimogwp 2 records LOW Aeroland 1 record LOW Amely 1 record MEDIUM Billey 1 record LOW Brook 1 record LOW Businext 1 record LOW

Records

2 records in Makeaholic · all components

TI-2025-36015 CVE-2025-58210 · GHSA-j392-f58p-c38q

WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in ThemeMove Makeaholic makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from n/a through <= 1.8.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00254 Published 2025-09-03 No fix listed CWE-862
TI-2025-34463 CVE-2025-54700 · GHSA-9h37-cj8f-m493

WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaholic allows PHP Local File Inclusion.This issue affects Makeaholic: from…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00533 Published 2025-08-14 No fix listed CWE-98
Open these records in search →