Skip to content
OpenAdvisories

Vendor

AncoraThemes

140 known vulnerabilities.

AncoraThemes at a glance

Last 12 months
133
Critical · all time
21
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 25 50 December 2025: 48 vulnerabilities, 1 critical Dec 2025 January 2026: 19 vulnerabilities February 2026: 14 vulnerabilities, 2 critical March 2026: 40 vulnerabilities, 3 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 5 vulnerabilities, 5 critical September 2026: 0 vulnerabilities Sep October 2026: 6 vulnerabilities, 4 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202664
Sep 202600
Aug 202655
Jul 202610
Jun 202600
May 202600
Apr 202600
Mar 2026403
Feb 2026142
Jan 2026190
Dec 2025481
Nov 202500
Oct 202511
Sep 202500
Aug 202500
Jul 202500
Jun 202521
May 202544
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

CleanSkin 2 Kings & Queens 1 Farm Agrico 1 Muji 1 Pets Land 1 Emberlyn 1 Apollo | Night Club, DJ Event WordPress Theme 1 Echo 1 Coworking 1 ElectroServ 1 Chronicle - Lifestyle Magazine & Blog WordPress Theme 1 Playful 1 Jardi 1 Qwery 1 Gustavo 1 Jarvis – Night Club, Concert, Festival WordPress 1 Shaha 1 Melody 1 Honor 1 Woopy 1 Your Dress 1 Handyman 1 Dentalux 1 Mr. Cobbler 1 Wabi-Sabi 1 Jack Well 1 Green Planet 1 Lighthouse 1 Lettuce 1 Fribbo 1 DJ Rainflow 1 ChildHope 1 The Mounty 1 Hypnotherapy 1 DetailX 1 Tornados 1 Playa 1 MaxCube 1 OnLeash 1 Parkivia 1
All Critical High Medium Low Exploited only Public exploit

140 results · Feed

  • High 8.1
    CVE-2026-112850

    WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.

    AncoraThemes Your Dress
  • Critical 9.8
    CVE-2026-78533

    WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

    AncoraThemes Qwery
  • Critical 9.8
    CVE-2026-66567

    WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.

    AncoraThemes Anesta
  • Critical 9.8
    CVE-2026-66482

    WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.

    AncoraThemes Drone Media
  • High 8.1
    CVE-2026-42724

    WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

    AncoraThemes CleanSkin
  • Critical 9.8
    CVE-2026-42723

    WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

    AncoraThemes CleanSkin
  • Critical 9.8
    CVE-2026-65578

    WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Agora <= 1.9 versions.

    AncoraThemes Agora
  • Critical 9.8
    CVE-2026-65577

    WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.

    AncoraThemes Advice
  • Critical 9.8
    CVE-2026-65575

    WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.

    AncoraThemes Accalia
  • Critical 9.8
    CVE-2026-65576

    WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.

    AncoraThemes Adrena
  • Critical 9.8
    CVE-2026-65574

    WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.

    AncoraThemes Abogado
  • High 8.1
    CVE-2025-58902

    WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions.

    AncoraThemes Lighthouse
  • High 8.1
    CVE-2026-22516

    WordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local File Inclusion.This issue affects Wizor's: from n/a through <= 2.12.

    AncoraThemes Wizor's
  • High 8.1
    CVE-2026-22513

    WordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Inclusion.This issue affects Triompher: from n/a through <= 1.1.0.

    AncoraThemes Triompher
  • High 8.1
    CVE-2026-22514

    WordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through <= 1.4.1.

    AncoraThemes Unica
  • High 8.1
    CVE-2026-22515

    WordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclusion.This issue affects VegaDays: from n/a through <= 1.2.0.

    AncoraThemes VegaDays
  • High 8.1
    CVE-2026-22508

    WordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclusion.This issue affects Dentalux: from n/a through <= 3.3.

    AncoraThemes Dentalux
  • High 8.1
    CVE-2026-22510

    WordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through <= 1.6.3.

    AncoraThemes Melody
  • High 8.1
    CVE-2026-22505

    WordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through <= 1.2.

    AncoraThemes Morning Records
  • Critical 9.8
    CVE-2026-22507

    WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6.

    AncoraThemes Beelove
  • High 8.1
    CVE-2026-22502

    WordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr. Cobbler mr-cobbler allows PHP Local File Inclusion.This issue affects Mr. Cobbler: from n/a through <= 1.1.9.

    AncoraThemes Mr. Cobbler
  • High 8.1
    CVE-2026-22496

    WordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnotherapy: from n/a through <= 1.2.10.

    AncoraThemes Hypnotherapy
  • High 8.1
    CVE-2026-22495

    WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: from n/a through <= 1.3.2.

    AncoraThemes Greenville
  • High 8.1
    CVE-2026-28125

    WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through <= 1.14.

    AncoraThemes Midi
  • High 8.1
    CVE-2026-28123

    WordPress Veil theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Veil veil allows PHP Local File Inclusion.This issue affects Veil: from n/a through <= 1.9.

    AncoraThemes Veil
  • High 8.1
    CVE-2026-28121

    WordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File Inclusion.This issue affects Anderson: from n/a through <= 1.4.2.

    AncoraThemes Anderson
  • High 8.1
    CVE-2026-28124

    WordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/a through <= 1.9.

    AncoraThemes Notarius
  • High 8.1
    CVE-2026-28041

    WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This issue affects Grit: from n/a through <= 1.0.1.

    AncoraThemes Grit
  • High 8.1
    CVE-2026-27339

    WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme buzzstone allows PHP Local File Inclusion.This issue affects Buzz Stone | …

    AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27340

    WordPress Apollo | Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Apollo | Night Club, DJ Event WordPress Theme apollo allows PHP Local File Inclusion.This issue affects Apollo | Night Club, …

    AncoraThemes Apollo | Night Club, DJ Event WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27335

    WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme ekoterra allows PHP Local File Inclusion.This issue affects Ekoterra - Non…

    AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme
  • High 8.1
    CVE-2026-27337

    WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle …

    AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27336

    WordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme consultor allows PHP Local File Inclusion.This issue affec…

    AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27097

    WordPress CasaMia | Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Pr…

    AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2026-22497

    WordPress Jardi theme <= 1.7.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2.

    AncoraThemes Jardi
  • High 8.1
    CVE-2026-22477

    WordPress Felizia theme <= 1.3.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Felizia felizia allows PHP Local File Inclusion.This issue affects Felizia: from n/a through <= 1.3.4.

    AncoraThemes Felizia
  • Critical 9.8
    CVE-2026-22451

    WordPress Handyman theme <= 1.4.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.

    AncoraThemes Handyman
  • High 8.1
    CVE-2026-22439

    WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Green Planet green-planet allows PHP Local File Inclusion.This issue affects Green Planet: from n/a through <= 1.1.14.

    AncoraThemes Green Planet
  • High 8.1
    CVE-2026-22434

    WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Crown Art crown-art allows PHP Local File Inclusion.This issue affects Crown Art: from n/a through <= 1.2.11.

    AncoraThemes Crown Art
  • High 8.1
    CVE-2026-22437

    WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Playa playa allows PHP Local File Inclusion.This issue affects Playa: from n/a through <= 1.3.9.

    AncoraThemes Playa