Edumall
Monthly
Reflected cross-site scripting in the EduMall WordPress theme (versions up to and including 4.5.3, published by ThemeMove) lets remote unauthenticated attackers execute arbitrary JavaScript in the browser of any user who clicks a crafted link - no login, privilege, or non-default configuration is required. Because the payload is reflected rather than stored, exploitation depends on a successful social-engineering lure against a victim (ideally an authenticated administrator) and does not affect all site visitors automatically, keeping this a moderate-priority issue rather than an emergency. No public exploit code was identified and the CVE is not listed in CISA KEV at the time of analysis.
Broken access control in ThemeMove's EduMall WordPress theme (versions through 4.5.1) permits authenticated low-privileged users to invoke restricted functionality without proper authorization checks. An attacker with any valid WordPress account can bypass the intended access control tiers and trigger actions that degrade site availability. No public exploit code or active exploitation has been identified at time of analysis, and the CVSS score of 4.3 reflects a contained, low-severity impact limited to availability.
Local file inclusion in ThemeMove EduMall WordPress theme up to version 4.4.7 allows authenticated attackers to read arbitrary files on the server. Exploitation requires low-privilege access and high attack complexity, with no user interaction needed; CVSS base score is 7.5. No active exploitation reported; EPSS probability is very low at 0.08%.
Unauthenticated remote attackers can trigger PHP local file inclusion in the ThemeMove EduMall WordPress theme on any version below 4.4.5, because a filename passed to an include/require statement is not properly controlled. Successful exploitation is rated high complexity, so the practical risk depends on reaching the specific vulnerable parameter and, for code execution rather than disclosure, on the attacker being able to plant PHP content in an includable path - those trigger conditions are not disclosed in the available advisory. There is no public exploit code identified at time of analysis and no CISA KEV listing; EPSS is 0.53% (43rd percentile), indicating a low-to-moderate exploitation likelihood, and the vendor fix is EduMall 4.4.5.
Reflected cross-site scripting in the EduMall WordPress theme (versions up to and including 4.5.3, published by ThemeMove) lets remote unauthenticated attackers execute arbitrary JavaScript in the browser of any user who clicks a crafted link - no login, privilege, or non-default configuration is required. Because the payload is reflected rather than stored, exploitation depends on a successful social-engineering lure against a victim (ideally an authenticated administrator) and does not affect all site visitors automatically, keeping this a moderate-priority issue rather than an emergency. No public exploit code was identified and the CVE is not listed in CISA KEV at the time of analysis.
Broken access control in ThemeMove's EduMall WordPress theme (versions through 4.5.1) permits authenticated low-privileged users to invoke restricted functionality without proper authorization checks. An attacker with any valid WordPress account can bypass the intended access control tiers and trigger actions that degrade site availability. No public exploit code or active exploitation has been identified at time of analysis, and the CVSS score of 4.3 reflects a contained, low-severity impact limited to availability.
Local file inclusion in ThemeMove EduMall WordPress theme up to version 4.4.7 allows authenticated attackers to read arbitrary files on the server. Exploitation requires low-privilege access and high attack complexity, with no user interaction needed; CVSS base score is 7.5. No active exploitation reported; EPSS probability is very low at 0.08%.
Unauthenticated remote attackers can trigger PHP local file inclusion in the ThemeMove EduMall WordPress theme on any version below 4.4.5, because a filename passed to an include/require statement is not properly controlled. Successful exploitation is rated high complexity, so the practical risk depends on reaching the specific vulnerable parameter and, for code execution rather than disclosure, on the attacker being able to plant PHP content in an includable path - those trigger conditions are not disclosed in the available advisory. There is no public exploit code identified at time of analysis and no CISA KEV listing; EPSS is 0.53% (43rd percentile), indicating a low-to-moderate exploitation likelihood, and the vendor fix is EduMall 4.4.5.