# cve.now: Thememove

The newest entries naming Thememove as an affected vendor (up to 200), of 31 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-39748](https://cve.now/CVE-2026-39748.md): WordPress EduMall theme \<= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-57797](https://cve.now/CVE-2026-57797.md): WordPress EduMall theme \<= 4.5.1 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2026-57791](https://cve.now/CVE-2026-57791.md): WordPress Brook theme \<= 2.9.0 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2026-57790](https://cve.now/CVE-2026-57790.md): WordPress Billey theme \<= 2.1.8 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-69094](https://cve.now/CVE-2025-69094.md): WordPress Unicamp theme \<= 2.2.2 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-39590](https://cve.now/CVE-2026-39590.md): WordPress Atomlab theme \<= 2.4.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-25027](https://cve.now/CVE-2026-25027.md): WordPress Unicamp theme \<= 2.7.1 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-22708](https://cve.now/CVE-2025-22708.md): WordPress Mitech theme \<= 2.3.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-22707](https://cve.now/CVE-2025-22707.md): WordPress Moody theme \<= 2.7.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-14430](https://cve.now/CVE-2025-14430.md): WordPress Brook - Agency Business Creative theme \<= 2.9.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-14429](https://cve.now/CVE-2025-14429.md): WordPress AeroLand theme \<= 1.6.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60069](https://cve.now/CVE-2025-60069.md): WordPress MinimogWP theme \<= 3.9.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-68062](https://cve.now/CVE-2025-68062.md): WordPress MinimogWP theme \<= 3.9.6 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-68061](https://cve.now/CVE-2025-68061.md): WordPress EduMall theme \<= 4.4.7 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-59564](https://cve.now/CVE-2025-59564.md): WordPress EduMall Theme \< 4.4.5 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-59558](https://cve.now/CVE-2025-59558.md): WordPress Billey Theme \< 2.1.6 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-59557](https://cve.now/CVE-2025-59557.md): WordPress Learts Addons Plugin \< 1.7.5 - SQL Injection Vulnerability (CVSS 9.3)
- [CVE-2025-59555](https://cve.now/CVE-2025-59555.md): WordPress Medizin Theme \< 1.9.7 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-58967](https://cve.now/CVE-2025-58967.md): WordPress Businext theme \< 2.4.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58958](https://cve.now/CVE-2025-58958.md): WordPress SmilePure Theme \< 1.8.5 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-53303](https://cve.now/CVE-2025-53303.md): WordPress ThemeMove Core Plugin \<= 1.4.2 - PHP Object Injection Vulnerability (CVSS 8.8)
- [CVE-2025-58206](https://cve.now/CVE-2025-58206.md): WordPress MaxCoach Theme \<= 3.2.5 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-58210](https://cve.now/CVE-2025-58210.md): WordPress Makeaholic Theme \<= 1.8.5 - Broken Access Control Vulnerability (CVSS 5.3)
- [CVE-2025-54701](https://cve.now/CVE-2025-54701.md): WordPress Unicamp Theme \<= 2.6.3 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-54700](https://cve.now/CVE-2025-54700.md): WordPress Makeaholic Theme \<= 1.8.4 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-8198](https://cve.now/CVE-2025-8198.md): MinimogWP – The High Converting eCommerce WordPress Theme \<= 3.9.0 - Unauthenticated Price Manipulation (CVSS 7.5)
- [CVE-2025-39474](https://cve.now/CVE-2025-39474.md): WordPress Amely theme \<= 3.1.4 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-32309](https://cve.now/CVE-2025-32309.md): WordPress Healsoul theme \<= 2.2.3 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-32310](https://cve.now/CVE-2025-32310.md): WordPress QuickCal plugin \<= 1.0.15 - CSRF to Privilege Escalation vulnerability (CVSS 8.8)
- [CVE-2025-2101](https://cve.now/CVE-2025-2101.md): Edumall \<= 4.2.4 - Unauthenticated Local File Inclusion (CVSS 8.1)
- [CVE-2024-13790](https://cve.now/CVE-2024-13790.md): MinimogWP – The High Converting eCommerce WordPress Theme \<= 3.7.0 - Unauthenticated Local PHP File Inclusion (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/thememove
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.