Skip to content
OpenAdvisories

Vendor

ThemeMove

31 known vulnerabilities.

Products

EduMall 4 Unicamp 3 Billey 2 Makeaholic 2 MinimogWP 2 MinimogWP – The High Converting eCommerce WordPress Theme 2 Brook 2 MaxCoach 1 SmilePure 1 Moody 1 Healsoul 1 Medizin 1 Amely 1 Businext 1 EduMall - Professional LMS Education Center WordPress Theme 1 AeroLand 1 ThemeMove Core 1 Mitech 1 Learts Addons 1 Atomlab 1 QuickCal - Appointment Booking Calendar for WordPress 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-59557

    WordPress Learts Addons Plugin < 1.7.5 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Learts Addons learts-addons allows SQL Injection.This issue affects Learts Addons: from n/a through < 1.7.5.

    ThemeMove Learts Addons
  • Critical 9.3
    CVE-2025-39474

    WordPress Amely theme <= 3.1.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Amely amely allows SQL Injection.This issue affects Amely: from n/a through <= 3.1.4.

    ThemeMove Amely
  • Critical 9.8
    CVE-2024-13790

    MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion

    The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.7.0 via the 'template' parameter. This makes it possible for unauthenticated attackers to include a…

    ThemeMove MinimogWP – The High Converting eCommerce WordPress Theme Web / CMS