CVE-2025-54700

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Makeaholic makeaholic allows PHP Local File Inclusion.This issue affects Makeaholic: from n/a through = 1.8.4...

CVE-2025-54701

CVE-2025-54701 concerns WordPress ThemeMove Unicamp (Theme Unicamp) versions up to and including 2.6.3, describing an improper control of the filename used in include/require statements that enables Local File Inclusion (LFI). The issue is categorized as a WordPress Unicamp theme vulnerability af...

CVE-2025-39474

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ThemeMove Amely allows SQL Injection. This issue affects Amely: from n/a through 3.1.4...