AncoraThemes vulnerabilities
Published CVEs affecting AncoraThemes products: 132 record(s), with severity, exploitation and fixes.
CleanSkin 2KindlyCare 1SevenHills 1Coworking 1Ironfit 1Gustavo 1Isida 1Fooddy 1Zio Alberto 1Impacto Patronus 1Parkivia 1Saveo 1Blabber 1Netmix 1UnlimHost 1The Mounty 1FixTeam 1Honor 1Horizon 1Quantum 1Shaha 1Tooth Fairy 1Wabi-Sabi 1Woopy 1CloudMe 1ElectroServ 1Playa 1Green Planet 1Felizia 1Jardi 1CasaMia | Property Rental Real Estate WordPress Theme 1Ekoterra - NonProfit, Green Energy & Ecology Theme 1Chronicle - Lifestyle Magazine & Blog WordPress Theme 1Buzz Stone | Magazine & Viral Blog WordPress Theme 1Apollo | Night Club, DJ Event WordPress Theme 1Grit 1Anderson 1Veil 1Notarius 1Midi 1
CVE-2026-78533
Critical · 9.8
CWE-502 Oct 10, 2026
WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
CVE-2026-66567
Critical · 9.8
CWE-502 Oct 10, 2026
WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
CVE-2026-66482
Critical · 9.8
CWE-502 Oct 10, 2026
WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVE-2026-42724
High · 8.1
CWE-98 Oct 10, 2026
WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
CVE-2026-42723
Critical · 9.8
CWE-502 Oct 10, 2026
WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVE-2026-65578
Critical · 9.8
CWE-502 Aug 6, 2026
WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
CVE-2026-65576
Critical · 9.8
CWE-502 Aug 6, 2026
WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
CVE-2026-65575
Critical · 9.8
CWE-502 Aug 6, 2026
WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
CVE-2026-65574
Critical · 9.8
CWE-502 Aug 6, 2026
WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.
CVE-2025-58902
High · 8.1
CWE-98 Jul 2, 2026
WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions.
CVE-2026-22516
High · 8.1
CWE-98 Mar 25, 2026
WordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local File Inclusion.This issue affects Wizor's: from n/a through <= 2.12.
CVE-2026-22515
High · 8.1
CWE-98 Mar 25, 2026
WordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclusion.This issue affects VegaDays: from n/a through <= 1.2.0.
CVE-2026-22514
High · 8.1
CWE-98 Mar 25, 2026
WordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through <= 1.4.1.
CVE-2026-22513
High · 8.1
CWE-98 Mar 25, 2026
WordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Inclusion.This issue affects Triompher: from n/a through <= 1.1.0.
CVE-2026-22510
High · 8.1
CWE-502 Mar 25, 2026
WordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through <= 1.6.3.
CVE-2026-22508
High · 8.1
CWE-98 Mar 25, 2026
WordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclusion.This issue affects Dentalux: from n/a through <= 3.3.
CVE-2026-22507
Critical · 9.8
CWE-502 Mar 25, 2026
WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6.
CVE-2026-22505
High · 8.1
CWE-502 Mar 25, 2026
WordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through <= 1.2.
CVE-2026-22502
High · 8.1
CWE-98 Mar 25, 2026
WordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr. Cobbler mr-cobbler allows PHP Local File Inclusion.This issue affects Mr. Cobbler: from n/a through <= 1.1.9.
CVE-2026-22496
High · 8.1
CWE-98 Mar 25, 2026
WordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnotherapy: from n/a through <= 1.2.10.
CVE-2026-22495
High · 8.1
CWE-98 Mar 25, 2026
WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: from n/a through <= 1.3.2.
CVE-2026-28125
High · 8.1
CWE-98 Mar 5, 2026
WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through <= 1.14.
CVE-2026-28124
High · 8.1
CWE-98 Mar 5, 2026
WordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/a through <= 1.9.
CVE-2026-28123
High · 8.1
CWE-98 Mar 5, 2026
WordPress Veil theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Veil veil allows PHP Local File Inclusion.This issue affects Veil: from n/a through <= 1.9.
CVE-2026-28121
High · 8.1
CWE-98 Mar 5, 2026
WordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File Inclusion.This issue affects Anderson: from n/a through <= 1.4.2.