Skip to content
OpenAdvisories

Vendor

AncoraThemes

140 known vulnerabilities.

Products

CleanSkin 2 Kings & Queens 1 Farm Agrico 1 Muji 1 Pets Land 1 Emberlyn 1 Apollo | Night Club, DJ Event WordPress Theme 1 Echo 1 Coworking 1 ElectroServ 1 Chronicle - Lifestyle Magazine & Blog WordPress Theme 1 Playful 1 Jardi 1 Qwery 1 Gustavo 1 Jarvis – Night Club, Concert, Festival WordPress 1 Shaha 1 Melody 1 Honor 1 Woopy 1 Your Dress 1 Handyman 1 Dentalux 1 Mr. Cobbler 1 Wabi-Sabi 1 Jack Well 1 Green Planet 1 Lighthouse 1 Lettuce 1 Fribbo 1 DJ Rainflow 1 ChildHope 1 The Mounty 1 Hypnotherapy 1 DetailX 1 Tornados 1 Playa 1 MaxCube 1 OnLeash 1 Parkivia 1
All Critical High Medium Low Exploited only Public exploit

140 results · Feed

  • High 8.1
    CVE-2026-22435

    WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File Inclusion.This issue affects ElectroServ: from n/a through <= 1.3.2.

    AncoraThemes ElectroServ
  • High 8.1
    CVE-2026-22433

    WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CloudMe cloudme allows PHP Local File Inclusion.This issue affects CloudMe: from n/a through <= 1.2.2.

    AncoraThemes CloudMe
  • High 8.1
    CVE-2026-22431

    WordPress Wabi-Sabi theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wabi-Sabi wabi-sabi allows PHP Local File Inclusion.This issue affects Wabi-Sabi: from n/a through <= 1.2.

    AncoraThemes Wabi-Sabi
  • High 8.1
    CVE-2026-22432

    WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Woopy woopy allows PHP Local File Inclusion.This issue affects Woopy: from n/a through <= 1.2.

    AncoraThemes Woopy
  • High 8.1
    CVE-2026-22428

    WordPress Tooth Fairy theme <= 1.16 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tooth Fairy tooth-fairy allows PHP Local File Inclusion.This issue affects Tooth Fairy: from n/a through <= 1.16.

    AncoraThemes Tooth Fairy
  • High 8.1
    CVE-2026-22424

    WordPress Shaha theme <= 1.1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Shaha shaha allows PHP Local File Inclusion.This issue affects Shaha: from n/a through <= 1.1.2.

    AncoraThemes Shaha
  • High 8.1
    CVE-2026-22419

    WordPress Honor theme <= 2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Honor honor allows PHP Local File Inclusion.This issue affects Honor: from n/a through <= 2.3.

    AncoraThemes Honor
  • High 8.1
    CVE-2026-22420

    WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Horizon horizon allows PHP Local File Inclusion.This issue affects Horizon: from n/a through <= 1.1.

    AncoraThemes Horizon
  • High 8.1
    CVE-2026-22421

    WordPress Quantum theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Quantum quantum allows PHP Local File Inclusion.This issue affects Quantum: from n/a through <= 1.0.

    AncoraThemes Quantum
  • High 8.1
    CVE-2026-22418

    WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through <= 1.3.1.

    AncoraThemes Great Lotus
  • High 8.1
    CVE-2026-22416

    WordPress FixTeam theme <= 1.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes FixTeam fixteam allows PHP Local File Inclusion.This issue affects FixTeam: from n/a through <= 1.5.0.

    AncoraThemes FixTeam
  • High 8.1
    CVE-2026-22415

    WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through <= 1.1.

    AncoraThemes The Mounty
  • High 8.1
    CVE-2026-22380

    WordPress UnlimHost theme <= 1.2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes UnlimHost unlimhost allows PHP Local File Inclusion.This issue affects UnlimHost: from n/a through <= 1.2.3.

    AncoraThemes UnlimHost
  • High 8.1
    CVE-2026-22379

    WordPress Netmix theme <= 1.0.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Netmix netmix allows PHP Local File Inclusion.This issue affects Netmix: from n/a through <= 1.0.10.

    AncoraThemes Netmix
  • High 8.1
    CVE-2026-22378

    WordPress Blabber theme <= 1.7.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Blabber blabber allows PHP Local File Inclusion.This issue affects Blabber: from n/a through <= 1.7.0.

    AncoraThemes Blabber
  • High 8.1
    CVE-2026-22377

    WordPress Saveo theme <= 1.1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Saveo saveo allows PHP Local File Inclusion.This issue affects Saveo: from n/a through <= 1.1.2.

    AncoraThemes Saveo
  • High 8.1
    CVE-2026-22373

    WordPress Fooddy theme <= 1.3.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fooddy fooddy allows PHP Local File Inclusion.This issue affects Fooddy: from n/a through <= 1.3.10.

    AncoraThemes Fooddy
  • High 8.1
    CVE-2026-22374

    WordPress Zio Alberto theme <= 1.2.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Zio Alberto zioalberto allows PHP Local File Inclusion.This issue affects Zio Alberto: from n/a through <= 1.2.2.

    AncoraThemes Zio Alberto
  • High 8.1
    CVE-2026-22375

    WordPress Impacto Patronus theme <= 1.2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Impacto Patronus impacto-patronus allows PHP Local File Inclusion.This issue affects Impacto Patronus: from n/a through <= 1.…

    AncoraThemes Impacto Patronus
  • High 8.1
    CVE-2026-22376

    WordPress Parkivia theme <= 1.1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Parkivia parkivia allows PHP Local File Inclusion.This issue affects Parkivia: from n/a through <= 1.1.9.

    AncoraThemes Parkivia
  • High 8.1
    CVE-2026-22371

    WordPress Gustavo theme <= 1.2.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Gustavo gustavo allows PHP Local File Inclusion.This issue affects Gustavo: from n/a through <= 1.2.2.

    AncoraThemes Gustavo
  • High 8.1
    CVE-2026-22372

    WordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Isida isida allows PHP Local File Inclusion.This issue affects Isida: from n/a through <= 1.4.2.

    AncoraThemes Isida
  • High 8.1
    CVE-2026-22369

    WordPress Ironfit theme <= 1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ironfit ironfit allows PHP Local File Inclusion.This issue affects Ironfit: from n/a through <= 1.5.

    AncoraThemes Ironfit
  • High 8.1
    CVE-2026-22367

    WordPress Coworking theme <= 1.6.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Coworking coworking allows PHP Local File Inclusion.This issue affects Coworking: from n/a through <= 1.6.1.

    AncoraThemes Coworking
  • Critical 9.8
    CVE-2025-69371

    WordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through <= 1.6.1.

    AncoraThemes KindlyCare
  • Critical 9.8
    CVE-2025-69372

    WordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through <= 1.6.2.

    AncoraThemes SevenHills
  • High 8.1
    CVE-2025-69075

    WordPress Yolox theme <= 1.0.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Yolox yolox allows PHP Local File Inclusion.This issue affects Yolox: from n/a through <= 1.0.15.

    AncoraThemes Yolox
  • High 8.1
    CVE-2025-69078

    WordPress Malta theme <= 1.3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Malta malta allows PHP Local File Inclusion.This issue affects Malta: from n/a through <= 1.3.3.

    AncoraThemes Malta
  • High 8.1
    CVE-2025-69077

    WordPress Hobo theme <= 1.0.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hobo hobo allows PHP Local File Inclusion.This issue affects Hobo: from n/a through <= 1.0.10.

    AncoraThemes Hobo
  • High 8.1
    CVE-2025-69076

    WordPress Modern Housewife theme <= 1.0.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Modern Housewife modernhousewife allows PHP Local File Inclusion.This issue affects Modern Housewife: from n/a through <= 1.0…

    AncoraThemes Modern Housewife
  • High 8.1
    CVE-2025-69073

    WordPress Piqes theme <= 1.0.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Piqes piqes allows PHP Local File Inclusion.This issue affects Piqes: from n/a through <= 1.0.11.

    AncoraThemes Piqes
  • High 8.1
    CVE-2025-69074

    WordPress Pearson Specter theme <= 1.11.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Pearson Specter pearsonspecter allows PHP Local File Inclusion.This issue affects Pearson Specter: from n/a through <= 1.11.3.

    AncoraThemes Pearson Specter
  • High 8.1
    CVE-2025-69072

    WordPress Prider theme <= 1.1.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Prider prider allows PHP Local File Inclusion.This issue affects Prider: from n/a through <= 1.1.3.1.

    AncoraThemes Prider
  • High 8.1
    CVE-2025-69071

    WordPress TanTum theme <= 1.1.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes TanTum tantum allows PHP Local File Inclusion.This issue affects TanTum: from n/a through <= 1.1.13.

    AncoraThemes TanTum
  • High 8.1
    CVE-2025-69070

    WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through <= 2.1.

    AncoraThemes Tornados
  • High 8.1
    CVE-2025-69068

    WordPress Muji theme <= 1.2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Muji muji allows PHP Local File Inclusion.This issue affects Muji: from n/a through <= 1.2.0.

    AncoraThemes Muji
  • High 8.1
    CVE-2025-69065

    WordPress Snow Mountain theme <= 1.4.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Snow Mountain snowmountain allows PHP Local File Inclusion.This issue affects Snow Mountain: from n/a through <= 1.4.3.

    AncoraThemes Snow Mountain
  • High 8.1
    CVE-2025-69066

    WordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Indoor Plants indoor-plants allows PHP Local File Inclusion.This issue affects Indoor Plants: from n/a through <= 1.2.7.

    AncoraThemes Indoor Plants
  • High 8.1
    CVE-2025-69067

    WordPress Tails theme <= 1.4.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tails tails allows PHP Local File Inclusion.This issue affects Tails: from n/a through <= 1.4.12.

    AncoraThemes Tails
  • High 8.1
    CVE-2025-69062

    WordPress Weedles theme <= 1.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Weedles weedles allows PHP Local File Inclusion.This issue affects Weedles: from n/a through <= 1.1.12.

    AncoraThemes Weedles