Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ThemeMove Component: Makeaholic Clear all filters
TI-2025-36015 CVE-2025-58210 · GHSA-j392-f58p-c38q

WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in ThemeMove Makeaholic makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from n/a through <= 1.8.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00254 Published 2025-09-03 No fix listed CWE-862
TI-2025-34463 CVE-2025-54700 · GHSA-9h37-cj8f-m493

WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaholic allows PHP Local File Inclusion.This issue affects Makeaholic: from…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00533 Published 2025-08-14 No fix listed CWE-98