EduMall - Professional LMS Education Center WordPress Theme

EduMall - Professional LMS Education Center WordPress Theme has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 3 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 3 of the records (75%). Other recurring categories include Missing Authorization.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

01234567891025.04.2025Today25.04.20258.1Edumall <= 4.2.4 - Unauthenticated Local File Inclusion CVSS 8.1 · 25.04.202502.08.20258.1EduMall < 4.4.5 - Unauthenticated Local File Inclusion CVSS 8.1 · 02.08.202514.12.20257.5EduMall <= 4.4.7 - Authenticated (Contributor+) Local File Inclusion CVSS 7.5 · 14.12.202502.07.20264.3EduMall - Professional LMS Education Center WordPress Theme <= 4.5.1 - Missing Authorization CVSS 4.3 · 02.07.2026

Strategic Overview

Avg CVSSHigh
7.0/ 10
Patch Coverage75%
Open

1

Fixed

3

Get automatic notifications for all EduMall - Professional LMS Education Center WordPress Theme vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2025-68061

EduMall <= 4.4.7 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C