Amely

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-39474 Jun 27, 12:15 CRITICAL Act Now

SQL injection in ThemeMove Amely WordPress theme (≤3.1.4) allows unauthenticated remote attackers to extract sensitive database data via crafted SQL queries. The vulnerability is network-exploitable with no user interaction, presenting a severe risk to sites using the theme. No public exploit or active exploitation has been confirmed at this time.

WordPress SQLi Amely Wordpress Theme Thememove

NVD

CVSS 3.1

9.3

EPSS

0.1%

CVE-2025-39474

EPSS 0% CVSS 9.3

CRITICAL Act Now

SQL injection in ThemeMove Amely WordPress theme (≤3.1.4) allows unauthenticated remote attackers to extract sensitive database data via crafted SQL queries. The vulnerability is network-exploitable with no user interaction, presenting a severe risk to sites using the theme. No public exploit or active exploitation has been confirmed at this time.

WordPress SQLi Amely +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy