Makeaholic

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-58210 Sep 03, 07:15 MEDIUM This Month

Missing Authorization vulnerability in ThemeMove Makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.8.5. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Makeaholic Wordpress Theme Thememove

NVD

CVSS 3.1

5.3

EPSS

0.0%

CVE-2025-54700 Aug 14, 11:15 HIGH This Week

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic allows PHP Local File Inclusion.8.4. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

PHP WordPress Information Disclosure LFI Makeaholic +2

NVD

CVSS 3.1

8.1

EPSS

0.1%

CVE-2025-58210

EPSS 0% CVSS 5.3

MEDIUM This Month

WordPress Authentication Bypass Makeaholic +2

NVD

CVE-2025-54700

EPSS 0% CVSS 8.1

HIGH This Week

PHP WordPress Information Disclosure +4

NVD