# cve.now: Ancorathemes

The newest entries naming Ancorathemes as an affected vendor (up to 200), of 140 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112850](https://cve.now/CVE-2026-112850.md): WordPress Your Dress theme \<= 1.4.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-78533](https://cve.now/CVE-2026-78533.md): WordPress Qwery theme \<= 3.6.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66567](https://cve.now/CVE-2026-66567.md): WordPress Anesta theme \<= 1.5.3 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66482](https://cve.now/CVE-2026-66482.md): WordPress Drone Media theme \<= 2.2.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-42724](https://cve.now/CVE-2026-42724.md): WordPress CleanSkin theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-42723](https://cve.now/CVE-2026-42723.md): WordPress CleanSkin theme \<= 1.5.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65578](https://cve.now/CVE-2026-65578.md): WordPress Agora theme \<= 1.9 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65577](https://cve.now/CVE-2026-65577.md): WordPress Advice theme \<= 1.18.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65576](https://cve.now/CVE-2026-65576.md): WordPress Adrena theme \<= 1.2.14 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65575](https://cve.now/CVE-2026-65575.md): WordPress Accalia theme \<= 1.5.3 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65574](https://cve.now/CVE-2026-65574.md): WordPress Abogado theme \<= 1.18 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-58902](https://cve.now/CVE-2025-58902.md): WordPress Lighthouse theme \<= 1.2.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22516](https://cve.now/CVE-2026-22516.md): WordPress Wizor's theme \<= 2.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22515](https://cve.now/CVE-2026-22515.md): WordPress VegaDays theme \<= 1.2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22514](https://cve.now/CVE-2026-22514.md): WordPress Unica theme \<= 1.4.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22513](https://cve.now/CVE-2026-22513.md): WordPress Triompher theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22510](https://cve.now/CVE-2026-22510.md): WordPress Melody theme \<= 1.6.3 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-22508](https://cve.now/CVE-2026-22508.md): WordPress Dentalux theme \<= 3.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22507](https://cve.now/CVE-2026-22507.md): WordPress Beelove theme \<= 1.2.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22505](https://cve.now/CVE-2026-22505.md): WordPress Morning Records theme \<= 1.2 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-22502](https://cve.now/CVE-2026-22502.md): WordPress Mr. Cobbler theme \<= 1.1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22496](https://cve.now/CVE-2026-22496.md): WordPress Hypnotherapy theme \<= 1.2.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22495](https://cve.now/CVE-2026-22495.md): WordPress Greenville theme \<= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28125](https://cve.now/CVE-2026-28125.md): WordPress Midi theme \<= 1.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28124](https://cve.now/CVE-2026-28124.md): WordPress Notarius theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28123](https://cve.now/CVE-2026-28123.md): WordPress Veil theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28121](https://cve.now/CVE-2026-28121.md): WordPress Anderson theme \<= 1.4.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28041](https://cve.now/CVE-2026-28041.md): WordPress Grit theme \<= 1.0.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27340](https://cve.now/CVE-2026-27340.md): WordPress Apollo | Night Club, DJ Event WordPress Theme theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27339](https://cve.now/CVE-2026-27339.md): WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme \<= 1.0.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27337](https://cve.now/CVE-2026-27337.md): WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27336](https://cve.now/CVE-2026-27336.md): WordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27335](https://cve.now/CVE-2026-27335.md): WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27097](https://cve.now/CVE-2026-27097.md): WordPress CasaMia | Property Rental Real Estate WordPress Theme theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22497](https://cve.now/CVE-2026-22497.md): WordPress Jardi theme \<= 1.7.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22477](https://cve.now/CVE-2026-22477.md): WordPress Felizia theme \<= 1.3.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22451](https://cve.now/CVE-2026-22451.md): WordPress Handyman theme \<= 1.4.7 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22439](https://cve.now/CVE-2026-22439.md): WordPress Green Planet theme \<= 1.1.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22437](https://cve.now/CVE-2026-22437.md): WordPress Playa theme \<= 1.3.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22435](https://cve.now/CVE-2026-22435.md): WordPress ElectroServ theme \<= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22434](https://cve.now/CVE-2026-22434.md): WordPress Crown Art theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22433](https://cve.now/CVE-2026-22433.md): WordPress CloudMe theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22432](https://cve.now/CVE-2026-22432.md): WordPress Woopy theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22431](https://cve.now/CVE-2026-22431.md): WordPress Wabi-Sabi theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22428](https://cve.now/CVE-2026-22428.md): WordPress Tooth Fairy theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22424](https://cve.now/CVE-2026-22424.md): WordPress Shaha theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22421](https://cve.now/CVE-2026-22421.md): WordPress Quantum theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22420](https://cve.now/CVE-2026-22420.md): WordPress Horizon theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22419](https://cve.now/CVE-2026-22419.md): WordPress Honor theme \<= 2.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22418](https://cve.now/CVE-2026-22418.md): WordPress Great Lotus theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22416](https://cve.now/CVE-2026-22416.md): WordPress FixTeam theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22415](https://cve.now/CVE-2026-22415.md): WordPress The Mounty theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22380](https://cve.now/CVE-2026-22380.md): WordPress UnlimHost theme \<= 1.2.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22379](https://cve.now/CVE-2026-22379.md): WordPress Netmix theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22378](https://cve.now/CVE-2026-22378.md): WordPress Blabber theme \<= 1.7.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22377](https://cve.now/CVE-2026-22377.md): WordPress Saveo theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22376](https://cve.now/CVE-2026-22376.md): WordPress Parkivia theme \<= 1.1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22375](https://cve.now/CVE-2026-22375.md): WordPress Impacto Patronus theme \<= 1.2.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22374](https://cve.now/CVE-2026-22374.md): WordPress Zio Alberto theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22373](https://cve.now/CVE-2026-22373.md): WordPress Fooddy theme \<= 1.3.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22372](https://cve.now/CVE-2026-22372.md): WordPress Isida theme \<= 1.4.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22371](https://cve.now/CVE-2026-22371.md): WordPress Gustavo theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22369](https://cve.now/CVE-2026-22369.md): WordPress Ironfit theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22367](https://cve.now/CVE-2026-22367.md): WordPress Coworking theme \<= 1.6.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69372](https://cve.now/CVE-2025-69372.md): WordPress SevenHills theme \<= 1.6.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-69371](https://cve.now/CVE-2025-69371.md): WordPress KindlyCare theme \<= 1.6.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-69078](https://cve.now/CVE-2025-69078.md): WordPress Malta theme \<= 1.3.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69077](https://cve.now/CVE-2025-69077.md): WordPress Hobo theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69076](https://cve.now/CVE-2025-69076.md): WordPress Modern Housewife theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69075](https://cve.now/CVE-2025-69075.md): WordPress Yolox theme \<= 1.0.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69074](https://cve.now/CVE-2025-69074.md): WordPress Pearson Specter theme \<= 1.11.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69073](https://cve.now/CVE-2025-69073.md): WordPress Piqes theme \<= 1.0.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69072](https://cve.now/CVE-2025-69072.md): WordPress Prider theme \<= 1.1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69071](https://cve.now/CVE-2025-69071.md): WordPress TanTum theme \<= 1.1.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69070](https://cve.now/CVE-2025-69070.md): WordPress Tornados theme \<= 2.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69068](https://cve.now/CVE-2025-69068.md): WordPress Muji theme \<= 1.2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69067](https://cve.now/CVE-2025-69067.md): WordPress Tails theme \<= 1.4.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69066](https://cve.now/CVE-2025-69066.md): WordPress Indoor Plants theme \<= 1.2.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69065](https://cve.now/CVE-2025-69065.md): WordPress Snow Mountain theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69064](https://cve.now/CVE-2025-69064.md): WordPress Pets Land theme \<= 1.2.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69062](https://cve.now/CVE-2025-69062.md): WordPress Weedles theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69061](https://cve.now/CVE-2025-69061.md): WordPress MoveMe theme \<= 1.2.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69060](https://cve.now/CVE-2025-69060.md): WordPress uReach theme \<= 1.3.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69059](https://cve.now/CVE-2025-69059.md): WordPress DiveIt theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69058](https://cve.now/CVE-2025-69058.md): WordPress PartyMaker theme \<= 1.1.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-6326](https://cve.now/CVE-2025-6326.md): WordPress Inset theme \<= 1.18.0 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-60058](https://cve.now/CVE-2025-60058.md): WordPress DetailX theme \<= 1.10.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60057](https://cve.now/CVE-2025-60057.md): WordPress DJ Rainflow theme \<= 1.3.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60056](https://cve.now/CVE-2025-60056.md): WordPress Winger theme \<= 1.0.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60055](https://cve.now/CVE-2025-60055.md): WordPress Fabrica theme \<= 1.8.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60054](https://cve.now/CVE-2025-60054.md): WordPress OnLeash theme \<= 1.5.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60053](https://cve.now/CVE-2025-60053.md): WordPress MaxCube theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60052](https://cve.now/CVE-2025-60052.md): WordPress W&D theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60051](https://cve.now/CVE-2025-60051.md): WordPress Rare Radio theme \<= 1.0.15.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60044](https://cve.now/CVE-2025-60044.md): WordPress Fribbo theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60043](https://cve.now/CVE-2025-60043.md): WordPress Wanderic theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60042](https://cve.now/CVE-2025-60042.md): WordPress Chinchilla theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58901](https://cve.now/CVE-2025-58901.md): WordPress Takeout theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58900](https://cve.now/CVE-2025-58900.md): WordPress UniTravel theme \<= 1.4.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58899](https://cve.now/CVE-2025-58899.md): WordPress Frame theme \<= 2.4.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58898](https://cve.now/CVE-2025-58898.md): WordPress HealthHub theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58896](https://cve.now/CVE-2025-58896.md): WordPress Otaku theme \<= 1.8.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58895](https://cve.now/CVE-2025-58895.md): WordPress Integro theme \<= 1.8.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58892](https://cve.now/CVE-2025-58892.md): WordPress Tourimo theme \<= 1.2.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58891](https://cve.now/CVE-2025-58891.md): WordPress Sanger theme \<= 1.24.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58890](https://cve.now/CVE-2025-58890.md): WordPress Playful theme \<= 1.19.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58888](https://cve.now/CVE-2025-58888.md): WordPress The Flash theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58885](https://cve.now/CVE-2025-58885.md): WordPress Pathfinder theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58879](https://cve.now/CVE-2025-58879.md): WordPress Festy theme \<= 1.13.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53434](https://cve.now/CVE-2025-53434.md): WordPress ChildHope theme \<= 1.1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53433](https://cve.now/CVE-2025-53433.md): WordPress EasyEat theme \<= 1.9.0 - Local File Inclusion vulnerability (CVSS 9.8)
- [CVE-2025-53432](https://cve.now/CVE-2025-53432.md): WordPress Echo theme \<= 1.15.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53431](https://cve.now/CVE-2025-53431.md): WordPress Emberlyn theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53430](https://cve.now/CVE-2025-53430.md): WordPress Etta theme \<= 1.14.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53429](https://cve.now/CVE-2025-53429.md): WordPress Exit Game theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-52768](https://cve.now/CVE-2025-52768.md): WordPress Faith & Hope theme \<= 2.13.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-52745](https://cve.now/CVE-2025-52745.md): WordPress Farm Agrico theme \<= 1.3.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49943](https://cve.now/CVE-2025-49943.md): WordPress Femme theme \<= 1.3.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49942](https://cve.now/CVE-2025-49942.md): WordPress Gardis theme \<= 1.2.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49941](https://cve.now/CVE-2025-49941.md): WordPress GlamChic theme \<= 1.0.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49371](https://cve.now/CVE-2025-49371.md): WordPress Strux theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49370](https://cve.now/CVE-2025-49370.md): WordPress Lymcoin theme \<= 1.3.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49369](https://cve.now/CVE-2025-49369.md): WordPress Lettuce theme \<= 1.1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49368](https://cve.now/CVE-2025-49368.md): WordPress Palladio theme \<= 1.1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49367](https://cve.now/CVE-2025-49367.md): WordPress Monyxi theme \<= 1.1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49366](https://cve.now/CVE-2025-49366.md): WordPress Hanani theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49365](https://cve.now/CVE-2025-49365.md): WordPress Jack Well theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49364](https://cve.now/CVE-2025-49364.md): WordPress Ludos Paradise theme \<= 2.1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49363](https://cve.now/CVE-2025-49363.md): WordPress Kings & Queens theme \<= 1.1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49362](https://cve.now/CVE-2025-49362.md): WordPress Gracioza theme \<= 1.0.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49361](https://cve.now/CVE-2025-49361.md): WordPress Mamita theme \<= 1.0.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49360](https://cve.now/CVE-2025-49360.md): WordPress Militarology theme \<= 1.0.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-49359](https://cve.now/CVE-2025-49359.md): WordPress ShieldGroup theme \<= 2.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60225](https://cve.now/CVE-2025-60225.md): WordPress BugsPatrol theme \<= 1.5.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-52815](https://cve.now/CVE-2025-52815.md): WordPress CityGov theme \<= 1.9 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-49072](https://cve.now/CVE-2025-49072.md): WordPress Mr. Murphy \< 1.2.12.1 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-31423](https://cve.now/CVE-2025-31423.md): WordPress Umberto theme \<= 1.2.8 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-31631](https://cve.now/CVE-2025-31631.md): WordPress Fish House theme \<= 1.2.7 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-32292](https://cve.now/CVE-2025-32292.md): WordPress Jarvis – Night Club, Concert, Festival WordPress theme \<= 1.8.11 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-48289](https://cve.now/CVE-2025-48289.md): WordPress Kids Planet theme \<= 2.2.14 - PHP Object Injection Vulnerability (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ancorathemes
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.