Skip to content
OpenAdvisories

Vendor

AncoraThemes

140 known vulnerabilities.

Products

CleanSkin 2 Kings & Queens 1 Farm Agrico 1 Muji 1 Pets Land 1 Emberlyn 1 Apollo | Night Club, DJ Event WordPress Theme 1 Echo 1 Coworking 1 ElectroServ 1 Chronicle - Lifestyle Magazine & Blog WordPress Theme 1 Playful 1 Jardi 1 Qwery 1 Gustavo 1 Jarvis – Night Club, Concert, Festival WordPress 1 Shaha 1 Melody 1 Honor 1 Woopy 1 Your Dress 1 Handyman 1 Dentalux 1 Mr. Cobbler 1 Wabi-Sabi 1 Jack Well 1 Green Planet 1 Lighthouse 1 Lettuce 1 Fribbo 1 DJ Rainflow 1 ChildHope 1 The Mounty 1 Hypnotherapy 1 DetailX 1 Tornados 1 Playa 1 MaxCube 1 OnLeash 1 Parkivia 1
All Critical High Medium Low Exploited only Public exploit

119 results · Clear filters · Feed

  • High 8.1
    CVE-2026-112850

    WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.

    AncoraThemes Your Dress
  • High 8.1
    CVE-2026-42724

    WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

    AncoraThemes CleanSkin
  • High 8.1
    CVE-2025-58902

    WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions.

    AncoraThemes Lighthouse
  • High 8.1
    CVE-2026-22516

    WordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local File Inclusion.This issue affects Wizor's: from n/a through <= 2.12.

    AncoraThemes Wizor's
  • High 8.1
    CVE-2026-22513

    WordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Inclusion.This issue affects Triompher: from n/a through <= 1.1.0.

    AncoraThemes Triompher
  • High 8.1
    CVE-2026-22514

    WordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through <= 1.4.1.

    AncoraThemes Unica
  • High 8.1
    CVE-2026-22515

    WordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclusion.This issue affects VegaDays: from n/a through <= 1.2.0.

    AncoraThemes VegaDays
  • High 8.1
    CVE-2026-22508

    WordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclusion.This issue affects Dentalux: from n/a through <= 3.3.

    AncoraThemes Dentalux
  • High 8.1
    CVE-2026-22510

    WordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through <= 1.6.3.

    AncoraThemes Melody
  • High 8.1
    CVE-2026-22505

    WordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through <= 1.2.

    AncoraThemes Morning Records
  • High 8.1
    CVE-2026-22502

    WordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr. Cobbler mr-cobbler allows PHP Local File Inclusion.This issue affects Mr. Cobbler: from n/a through <= 1.1.9.

    AncoraThemes Mr. Cobbler
  • High 8.1
    CVE-2026-22496

    WordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnotherapy: from n/a through <= 1.2.10.

    AncoraThemes Hypnotherapy
  • High 8.1
    CVE-2026-22495

    WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: from n/a through <= 1.3.2.

    AncoraThemes Greenville
  • High 8.1
    CVE-2026-28125

    WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through <= 1.14.

    AncoraThemes Midi
  • High 8.1
    CVE-2026-28123

    WordPress Veil theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Veil veil allows PHP Local File Inclusion.This issue affects Veil: from n/a through <= 1.9.

    AncoraThemes Veil
  • High 8.1
    CVE-2026-28121

    WordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File Inclusion.This issue affects Anderson: from n/a through <= 1.4.2.

    AncoraThemes Anderson
  • High 8.1
    CVE-2026-28124

    WordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/a through <= 1.9.

    AncoraThemes Notarius
  • High 8.1
    CVE-2026-28041

    WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This issue affects Grit: from n/a through <= 1.0.1.

    AncoraThemes Grit
  • High 8.1
    CVE-2026-27339

    WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme buzzstone allows PHP Local File Inclusion.This issue affects Buzz Stone | …

    AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27340

    WordPress Apollo | Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Apollo | Night Club, DJ Event WordPress Theme apollo allows PHP Local File Inclusion.This issue affects Apollo | Night Club, …

    AncoraThemes Apollo | Night Club, DJ Event WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27335

    WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme ekoterra allows PHP Local File Inclusion.This issue affects Ekoterra - Non…

    AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme
  • High 8.1
    CVE-2026-27337

    WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle …

    AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27336

    WordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme consultor allows PHP Local File Inclusion.This issue affec…

    AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27097

    WordPress CasaMia | Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Pr…

    AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-22477

    WordPress Felizia theme <= 1.3.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Felizia felizia allows PHP Local File Inclusion.This issue affects Felizia: from n/a through <= 1.3.4.

    AncoraThemes Felizia
  • High 8.1
    CVE-2026-22439

    WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Green Planet green-planet allows PHP Local File Inclusion.This issue affects Green Planet: from n/a through <= 1.1.14.

    AncoraThemes Green Planet
  • High 8.1
    CVE-2026-22434

    WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Crown Art crown-art allows PHP Local File Inclusion.This issue affects Crown Art: from n/a through <= 1.2.11.

    AncoraThemes Crown Art
  • High 8.1
    CVE-2026-22437

    WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Playa playa allows PHP Local File Inclusion.This issue affects Playa: from n/a through <= 1.3.9.

    AncoraThemes Playa
  • High 8.1
    CVE-2026-22435

    WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File Inclusion.This issue affects ElectroServ: from n/a through <= 1.3.2.

    AncoraThemes ElectroServ
  • High 8.1
    CVE-2026-22433

    WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CloudMe cloudme allows PHP Local File Inclusion.This issue affects CloudMe: from n/a through <= 1.2.2.

    AncoraThemes CloudMe
  • High 8.1
    CVE-2026-22431

    WordPress Wabi-Sabi theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wabi-Sabi wabi-sabi allows PHP Local File Inclusion.This issue affects Wabi-Sabi: from n/a through <= 1.2.

    AncoraThemes Wabi-Sabi
  • High 8.1
    CVE-2026-22432

    WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Woopy woopy allows PHP Local File Inclusion.This issue affects Woopy: from n/a through <= 1.2.

    AncoraThemes Woopy
  • High 8.1
    CVE-2026-22428

    WordPress Tooth Fairy theme <= 1.16 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tooth Fairy tooth-fairy allows PHP Local File Inclusion.This issue affects Tooth Fairy: from n/a through <= 1.16.

    AncoraThemes Tooth Fairy
  • High 8.1
    CVE-2026-22424

    WordPress Shaha theme <= 1.1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Shaha shaha allows PHP Local File Inclusion.This issue affects Shaha: from n/a through <= 1.1.2.

    AncoraThemes Shaha
  • High 8.1
    CVE-2026-22419

    WordPress Honor theme <= 2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Honor honor allows PHP Local File Inclusion.This issue affects Honor: from n/a through <= 2.3.

    AncoraThemes Honor
  • High 8.1
    CVE-2026-22420

    WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Horizon horizon allows PHP Local File Inclusion.This issue affects Horizon: from n/a through <= 1.1.

    AncoraThemes Horizon
  • High 8.1
    CVE-2026-22421

    WordPress Quantum theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Quantum quantum allows PHP Local File Inclusion.This issue affects Quantum: from n/a through <= 1.0.

    AncoraThemes Quantum
  • High 8.1
    CVE-2026-22418

    WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through <= 1.3.1.

    AncoraThemes Great Lotus
  • High 8.1
    CVE-2026-22416

    WordPress FixTeam theme <= 1.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes FixTeam fixteam allows PHP Local File Inclusion.This issue affects FixTeam: from n/a through <= 1.5.0.

    AncoraThemes FixTeam
  • High 8.1
    CVE-2026-22415

    WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through <= 1.1.

    AncoraThemes The Mounty