AncoraThemes
Vulnerability activity for AncoraThemes: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 6
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 18
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.1HighOct 23, 2026AncoraThemes Your Dress Path traversal / file handlingCVE-2026-112850Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.
- 9.8CriticalOct 10, 2026AncoraThemes Qwery DeserializationCVE-2026-78533Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
- 9.8CriticalOct 10, 2026AncoraThemes Anesta DeserializationCVE-2026-66567Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
- 9.8CriticalOct 10, 2026AncoraThemes Drone Media DeserializationCVE-2026-66482Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
- 8.1HighOct 10, 2026AncoraThemes CleanSkin Path traversal / file handlingCVE-2026-42724Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
- 9.8CriticalOct 10, 2026AncoraThemes CleanSkin DeserializationCVE-2026-42723Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
- 8.1HighDec 18, 2025Ancorathemes takeout Path traversal / file handlingCVE-2025-58901Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through <= 1.3.0.
- 8.1HighDec 18, 2025Ancorathemes unitravel Path traversal / file handlingCVE-2025-58900Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes UniTravel unitravel allows PHP Local File Inclusion.This issue affects UniTravel: from n/a through <= 1.4.2.
- 8.1HighDec 18, 2025Ancorathemes frame Path traversal / file handlingCVE-2025-58899Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Frame frame allows PHP Local File Inclusion.This issue affects Frame: from n/a through <= 2.4.0.
- 8.1HighDec 18, 2025Ancorathemes healthhub Path traversal / file handlingCVE-2025-58898Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes HealthHub healthhub allows PHP Local File Inclusion.This issue affects HealthHub: from n/a through <= 1.3.0.
- 8.1HighDec 18, 2025Ancorathemes otaku Path traversal / file handlingCVE-2025-58896Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through <= 1.8.0.
- 8.1HighDec 18, 2025Ancorathemes integro Path traversal / file handlingCVE-2025-58895Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Integro integro allows PHP Local File Inclusion.This issue affects Integro: from n/a through <= 1.8.0.
- 8.1HighDec 18, 2025Ancorathemes tourimo Path traversal / file handlingCVE-2025-58892Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tourimo tourimo allows PHP Local File Inclusion.This issue affects Tourimo: from n/a through <= 1.2.3.
- 8.1HighDec 18, 2025Ancorathemes sanger Path traversal / file handlingCVE-2025-58891Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Sanger sanger allows PHP Local File Inclusion.This issue affects Sanger: from n/a through <= 1.24.0.
- 8.1HighDec 18, 2025Ancorathemes playful Path traversal / file handlingCVE-2025-58890Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Playful playful allows PHP Local File Inclusion.This issue affects Playful: from n/a through <= 1.19.0.
- 8.1HighDec 18, 2025Ancorathemes theflash Path traversal / file handlingCVE-2025-58888Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through <= 1.15.
- 8.1HighDec 18, 2025Ancorathemes pathfinder Path traversal / file handlingCVE-2025-58885Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Pathfinder pathfinder allows PHP Local File Inclusion.This issue affects Pathfinder: from n/a through <= 1.16.
- 8.1HighDec 18, 2025Ancorathemes festy Path traversal / file handlingCVE-2025-58879Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through <= 1.13.0.
Top products
- CleanSkin2 CVEs in the last year, 1 critical
- Your Dress1 CVE in the last year
- unitravel1 CVE in the last year
- tourimo1 CVE in the last year
- theflash1 CVE in the last year
- takeout1 CVE in the last year
- sanger1 CVE in the last year
- Qwery1 CVE in the last year, 1 critical
- playful1 CVE in the last year
- pathfinder1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.