Edumall Vulnerabilities

The EduMall - Professional LMS Education Center WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 4.5.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unau...

CVSS:

4.3

Affected:

up to 4.5.1

Fixed in:

4.5.2

Disclosed:

Jul 2, 2026

CVE-2026-57797 on NVD →

The EduMall theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.4.7. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This ca...

CVSS:

7.5

Affected:

up to 4.4.7

Fix:

No patched version reported

Disclosed:

Dec 14, 2025

CVE-2025-68061 on NVD →

The EduMall theme for WordPress is vulnerable to Local File Inclusion in versions up to 4.4.5. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive da...

CVSS:

8.1

Affected:

up to 4.4.5

Fixed in:

4.4.5

Disclosed:

Aug 2, 2025

CVE-2025-59564 on NVD →

The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the exec...

CVSS:

8.1

Affected:

up to 4.2.4

Fixed in:

4.3.0

Disclosed:

Apr 25, 2025

CVE-2025-2101 on NVD →