Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Theme security history

EduMall - Professional LMS Education Center WordPress Theme Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 4 vulnerability records associated with EduMall - Professional LMS Education Center WordPress Theme, published between 2025 and 2026.

Dataset last synchronized: 2026-08-02 09:41:47 UTC

At a glance

Security Snapshot

4Total records
0Critical
3High
1Medium
0Low
0Informational
3Patched records
1Currently marked unpatched
2025-04-25First disclosure
2026-07-02Latest disclosure
4 of 4CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202533 records
202611 records

Severity Breakdown

SeverityRecordsShare
High375%
Medium125%

Vulnerability-Type Breakdown

Other

3 records75%

First: 2025. Latest: 2025.

Missing Authorization

1 record25%

First: 2026. Latest: 2026.

Patch Status

Patched
3
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 4.5.2
  • 4.4.5
  • 4.3.0

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-4.5.1EduMall - Professional LMS Education Center WordPress Theme <= 4.5.1 - Missing AuthorizationJuly 2, 20264.5.2Medium
*-4.4.7EduMall <= 4.4.7 - Authenticated (Contributor+) Local File InclusionDecember 14, 2025Not suppliedHigh
[*, 4.4.5)EduMall < 4.4.5 - Unauthenticated Local File InclusionAugust 2, 20254.4.5High
*-4.2.4Edumall <= 4.2.4 - Unauthenticated Local File InclusionApril 25, 20254.3.0High

Selected source records

Latest Records

MediumCVE-2026-57797

EduMall - Professional LMS Education Center WordPress Theme <= 4.5.1 - Missing Authorization

Published: July 2, 2026

Affected versions
*-4.5.1
Patched versions
4.5.2
Original Wordfence record
HighCVE-2025-68061

EduMall <= 4.4.7 - Authenticated (Contributor+) Local File Inclusion

Published: December 14, 2025

Affected versions
*-4.4.7
Patched versions
Not supplied
Original Wordfence record
HighCVE-2025-59564

EduMall < 4.4.5 - Unauthenticated Local File Inclusion

Published: August 2, 2025

Affected versions
[*, 4.4.5)
Patched versions
4.4.5
Original Wordfence record
HighCVE-2025-2101

Edumall <= 4.2.4 - Unauthenticated Local File Inclusion

Published: April 25, 2025

Affected versions
*-4.2.4
Patched versions
4.3.0
Original Wordfence record

Highest-Severity Records

HighCVE-2025-2101

Edumall <= 4.2.4 - Unauthenticated Local File Inclusion

Published: April 25, 2025

Affected versions
*-4.2.4
Patched versions
4.3.0
Original Wordfence record
HighCVE-2025-59564

EduMall < 4.4.5 - Unauthenticated Local File Inclusion

Published: August 2, 2025

Affected versions
[*, 4.4.5)
Patched versions
4.4.5
Original Wordfence record
HighCVE-2025-68061

EduMall <= 4.4.7 - Authenticated (Contributor+) Local File Inclusion

Published: December 14, 2025

Affected versions
*-4.4.7
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2026-57797

EduMall - Professional LMS Education Center WordPress Theme <= 4.5.1 - Missing Authorization

Published: July 2, 2026

Affected versions
*-4.5.1
Patched versions
4.5.2
Original Wordfence record

Currently Marked Unpatched Records

HighCVE-2025-68061

EduMall <= 4.4.7 - Authenticated (Contributor+) Local File Inclusion

Published: December 14, 2025

Affected versions
*-4.4.7
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory