Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how ancorathemes compares to other vendors in security performance

View Risk Score →

Software

ancorathemes inset
2
ancorathemes anderson
1
ancorathemes beelove (wordpress theme)
1
ancorathemes blabber
1
ancorathemes bugspatrol
1
ancorathemes chinchilla
1
ancorathemes citygov
1
ancorathemes coworking
1
ancorathemes dentalux
1
ancorathemes detailx
1
ancorathemes diveit
1
ancorathemes dj rainflow
1
ancorathemes easyeat
1
ancorathemes echo
1
ancorathemes ekoterra - nonprofit, green energy & ecology theme
1
ancorathemes electroserv
1
ancorathemes emberlyn
1
ancorathemes etta
1
ancorathemes fabrica
1
ancorathemes faith & hope
1
ancorathemes farm agrico
1
ancorathemes felizia
1
ancorathemes femme
1
ancorathemes festy wordpress
1
ancorathemes fish house
1
ancorathemes fixteam
1
ancorathemes fooddy
1
ancorathemes frame
1
ancorathemes frame wordpress
1
ancorathemes fribbo
1
ancorathemes gardis
1
ancorathemes gracioza
1
ancorathemes great lotus
1
ancorathemes green planet
1
ancorathemes greenville (wordpress theme)
1
ancorathemes grit
1
ancorathemes gustavo
1
ancorathemes hanani
1
ancorathemes handyman
1
ancorathemes healthhub
1
ancorathemes healthhub wordpress
1
ancorathemes hobo
1
ancorathemes horizon
1
ancorathemes impacto patronus
1
ancorathemes indoor plants
1
ancorathemes integro
1
ancorathemes integro wordpress
1
ancorathemes ironfit
1
ancorathemes isida
1
ancorathemes jack well
1

AncoraThemes Fish HouseWordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7.

1 / 2
Source: NVD
First published (updated )
CVE-2025-31631

AncoraThemes UmbertoWordPress Umberto theme <= 1.2.8 - PHP Object Injection Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8.

1 / 2
Source: NVD
First published (updated )
CVE-2025-31423

AncoraThemes Jarvis - Night Club, Concert, Festival WordPress themeWordPress Jarvis – Night Club, Concert, Festival WordPress theme <= 1.8.11 - PHP Object Injection Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress allows Object Injection. This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/a through 1.8.11.

1 / 2
Source: NVD
First published (updated )
CVE-2025-32292

AncoraThemes Kids PlanetWordPress Kids Planet theme <= 2.2.14 - PHP Object Injection Vulnerability

Risk 61
Severity
9.8
EPSS
0.05%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet allows Object Injection. This issue affects Kids Planet: from n/a through 2.2.14.

1 / 2
Source: NVD

Remedy

Update the WordPress Kids Planet theme to the latest available version (at least 2.2.14.1).
First published (updated )
CVE-2025-48289

AncoraThemes Mr. Murphy (WordPress theme)WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability

Risk 61
Severity
9.8
EPSS
0.05%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy allows Object Injection.This issue affects Mr. Murphy: from n/a before 1.2.12.1.

1 / 2
Source: NVD

Remedy

Update the WordPress Mr. Murphy theme to the latest available version (at least 1.2.12.1).
First published (updated )
CVE-2025-49072

AncoraThemes BugsPatrolWordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0.

First published (updated )
CVE-2025-60225

AncoraThemes EasyEatWordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes EasyEat easyeat allows PHP Local File Inclusion.This issue affects EasyEat: from n/a through <= 1.9.0.

First published (updated )
CVE-2025-53433

AncoraThemes SevenHillsWordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through <= 1.6.2.

First published (updated )
CVE-2025-69372

AncoraThemes KindlyCareWordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through <= 1.6.1.

First published (updated )
CVE-2025-69371

AncoraThemes JardiWordPress Jardi theme <= 1.7.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2.

First published (updated )
CVE-2026-22497

AncoraThemes HandymanWordPress Handyman theme <= 1.4.7 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.

First published (updated )
CVE-2026-22451

AncoraThemes Beelove (WordPress theme)WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6.

First published (updated )
CVE-2026-22507

AncoraThemes InsetWordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset allows PHP Local File Inclusion. This issue affects Inset: from n/a through 1.18.0.

1 / 2
Source: NVD
First published (updated )
CVE-2025-26592

AncoraThemes CityGovWordPress CityGov theme <= 1.9 - Local File Inclusion Vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CityGov allows PHP Local File Inclusion. This issue affects CityGov: from n/a through 1.9.

1 / 2
Source: NVD
First published (updated )
CVE-2025-52815

AncoraThemes GardisWordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through <= 1.2.13.

First published (updated )
CVE-2025-49942

AncoraThemes MonyxiWordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Monyxi monyxi allows PHP Local File Inclusion.This issue affects Monyxi: from n/a through <= 1.1.8.

First published (updated )
CVE-2025-49367

AncoraThemes EmberlynWordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Emberlyn emberlyn allows PHP Local File Inclusion.This issue affects Emberlyn: from n/a through <= 1.3.1.

First published (updated )
CVE-2025-53431

AncoraThemes MilitarologyWordPress Militarology theme <= 1.0.15 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Militarology militarology allows PHP Local File Inclusion.This issue affects Militarology: from n/a through <= 1.0.15.

First published (updated )
CVE-2025-49360

AncoraThemes PalladioWordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Palladio palladio allows PHP Local File Inclusion.This issue affects Palladio: from n/a through <= 1.1.10.

First published (updated )
CVE-2025-49368

AncoraThemes MamitaWordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mamita mamita allows PHP Local File Inclusion.This issue affects Mamita: from n/a through <= 1.0.9.

First published (updated )
CVE-2025-49361

AncoraThemes HananiWordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hanani hanani allows PHP Local File Inclusion.This issue affects Hanani: from n/a through <= 1.2.11.

First published (updated )
CVE-2025-49366

AncoraThemes Kings & QueensWordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Kings & Queens kings-queens allows PHP Local File Inclusion.This issue affects Kings & Queens: from n/a through <= 1.1.16.

First published (updated )
CVE-2025-49363

AncoraThemes EchoWordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Echo echo allows PHP Local File Inclusion.This issue affects Echo: from n/a through <= 1.15.0.

First published (updated )
CVE-2025-53432

AncoraThemes LettuceWordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Lettuce lettuce allows PHP Local File Inclusion.This issue affects Lettuce: from n/a through <= 1.1.7.

First published (updated )
CVE-2025-49369

AncoraThemes LymcoinWordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Lymcoin lymcoin allows PHP Local File Inclusion.This issue affects Lymcoin: from n/a through <= 1.3.12.

First published (updated )
CVE-2025-49370

AncoraThemes Ludos ParadiseWordPress Ludos Paradise theme <= 2.1.3 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ludos Paradise ludos-paradise allows PHP Local File Inclusion.This issue affects Ludos Paradise: from n/a through <= 2.1.3.

First published (updated )
CVE-2025-49364

AncoraThemes FemmeWordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Femme femme allows PHP Local File Inclusion.This issue affects Femme: from n/a through <= 1.3.11.

First published (updated )
CVE-2025-49943

AncoraThemes Faith & HopeWordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Faith & Hope faith-hope allows PHP Local File Inclusion.This issue affects Faith & Hope: from n/a through <= 2.13.0.

First published (updated )
CVE-2025-52768

AncoraThemes EttaWordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Etta etta allows PHP Local File Inclusion.This issue affects Etta: from n/a through <= 1.14.0.

First published (updated )
CVE-2025-53430

AncoraThemes Jack WellWordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Jack Well jack-well allows PHP Local File Inclusion.This issue affects Jack Well: from n/a through <= 1.0.14.

First published (updated )
CVE-2025-49365

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203