Read the docs

AncoraThemes

Records140All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high119CVSS 7.0–8.9

Exploited now

AncoraThemes records in CISA KEV

No AncoraThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Festy 1 record LOW Frame 1 record LOW Healthhub 1 record LOW Integro 1 record LOW Otaku 1 record LOW Pathfinder 1 record LOW Playful 1 record LOW Sanger 1 record LOW

Records

140 records

TI-2026-18078 CVE-2026-22497 · GHSA-pq26-qwh9-rwvm

WordPress Jardi theme <= 1.7.2 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00606 Published 2026-03-05 No fix listed CWE-502
TI-2026-18032 CVE-2026-22451 · GHSA-m828-vxcr-42c8

WordPress Handyman theme <= 1.4.7 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00606 Published 2026-03-05 No fix listed CWE-502
TI-2025-37591 CVE-2025-60225 · GHSA-6qr9-qvc2-68jc

WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00593 Published 2025-10-22 No fix listed CWE-502
TI-2025-23389 CVE-2025-32292 · GHSA-pr3p-9qh5-qp2f

WordPress Jarvis – Night Club, Concert, Festival WordPress theme <= 1.8.11 - PHP Object Injection Vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress jarvis allows Object Injection.This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2025-05-23 No fix listed CWE-502
TI-2025-22794 CVE-2025-31631 · GHSA-8rwf-97vc-4rh3

WordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House fish-house allows Object Injection.This issue affects Fish House: from n/a through <= 1.2.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2025-05-23 No fix listed CWE-502
TI-2025-22604 CVE-2025-31423 · GHSA-v4pp-gcmm-cv95

WordPress Umberto theme <= 1.2.8 - PHP Object Injection Vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto umberto allows Object Injection.This issue affects Umberto: from n/a through <= 1.2.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2025-05-23 No fix listed CWE-502
TI-2026-70440 CVE-2026-78533 · GHSA-pvr3-238r-qr3r

PHP object injection in WordPress Qwery theme

Priority MEDIUM 49

Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00328 Published 2026-10-10 No fix listed CWE-502
TI-2026-18088 CVE-2026-22507 · GHSA-9w9w-5j2r-h785

WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00529 Published 2026-03-25 No fix listed CWE-502
TI-2025-42815 CVE-2025-69372 · GHSA-mrcv-7mr4-vfm5

WordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through <= 1.6.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00514 Published 2026-02-20 No fix listed CWE-502
TI-2025-42814 CVE-2025-69371 · GHSA-wxg7-qr4v-6w49

WordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through <= 1.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00514 Published 2026-02-20 No fix listed CWE-502
TI-2025-33379 CVE-2025-53433 · GHSA-8jj5-5wqc-h9g2

WordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability

Priority MEDIUM 49

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes EasyEat easyeat allows PHP Local File Inclusion.This issue affects EasyEat: from n/a t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2025-12-18 No fix listed CWE-98
TI-2025-30615 CVE-2025-48289 · GHSA-7wvq-x6j3-ggcp

WordPress Kids Planet theme <= 2.2.14 - PHP Object Injection Vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This issue affects Kids Planet: from n/a through <= 2.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00499 Published 2025-05-23 No fix listed CWE-502
TI-2025-37417 CVE-2025-60051 · GHSA-p3w7-fpw8-mrp7

WordPress Rare Radio theme <= 1.0.15.1 - Local File Inclusion vulnerability

Priority MEDIUM 42

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Rare Radio rareradio allows PHP Local File Inclusion.This issue affects Rare Radio: fr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00499 Published 2025-12-18 No fix listed CWE-98
TI-2026-22382 CVE-2026-28041 · GHSA-jw9g-6p54-cv4q

WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This issue affects Grit: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00473 Published 2026-03-05 No fix listed CWE-98
TI-2026-21758 CVE-2026-27340 · GHSA-cv83-fhv6-22m6

WordPress Apollo | Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Apollo | Night Club, DJ Event WordPress Theme apollo allows PHP Local File Inclusion.T…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00473 Published 2026-03-05 No fix listed CWE-98
TI-2026-21757 CVE-2026-27339 · GHSA-mmrg-pqpf-6qrw

WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme buzzstone allows PHP Local File Inc…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00473 Published 2026-03-05 No fix listed CWE-98
Load more
Open these records in search →