Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

140 records

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: f…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00337 Published 2026-10-23 No fix listed CWE-98
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00328 Published 2026-10-10 No fix listed CWE-502
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local File Inclusion.This issue affects Wizor's:…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00431 Published 2026-03-25 No fix listed CWE-98
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclusion.This issue affects VegaDays: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00539 Published 2026-03-25 No fix listed CWE-98
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00539 Published 2026-03-25 No fix listed CWE-98
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Inclusion.This issue affects Triompher: from…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00539 Published 2026-03-25 No fix listed CWE-98
Priority LOW 37

Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through <= 1.6.3.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00409 Published 2026-03-25 No fix listed CWE-502
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclusion.This issue affects Dentalux: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00524 Published 2026-03-25 No fix listed CWE-98
Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00529 Published 2026-03-25 No fix listed CWE-502
Priority LOW 37

Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through <= 1.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00409 Published 2026-03-25 No fix listed CWE-502
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnother…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00524 Published 2026-03-25 No fix listed CWE-98
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: f…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00524 Published 2026-03-25 No fix listed CWE-98
Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00384 Published 2026-03-05 No fix listed CWE-98
Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00384 Published 2026-03-05 No fix listed CWE-98
Load more