Hoch
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
Betroffene Software
Klicken Sie auf eine Technologie, um alle zugehörigen Schwachstellen anzuzeigen.
| Plattform | Paket | Anfällige Versionen | Behoben in |
|---|---|---|---|
| WordPress-Theme | Abogado - Lawyer WordPress Theme | < 1.18.0 | 1.18.0 |
| WordPress-Theme | Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor | <= 1.5.3 | keine Korrektur |
| WordPress-Theme | Adrena | Airsoft Club & Paintball WordPress Theme | <= 1.2.13 | keine Korrektur |
| WordPress-Theme | Advice - Psychology, Therapy & Counseling Theme | < 1.17.0 | 1.17.0 |
| WordPress-Theme | Agora — Event & Conference WordPress Theme | < 1.8.0 | 1.8.0 |
| WordPress-Theme | Alanzo | Chef & Event Catering WordPress Theme | <= 1.2.3 | 1.2.4 |
| WordPress-Theme | Albertino - Laboratory WordPress Theme | < 2.24.0.0 | 2.24.0.0 |
| WordPress-Theme | Alhambra | Mosque & Islamic WordPress Theme + RTL | <= 1.1.13 | keine Korrektur |
| WordPress-Theme | A.Williams | Assistant & Administrative Services WordPress Theme | <= 1.3.0 | 1.3.1 |
| WordPress-Theme | AlphaColor - Design & Printing Elementor Template Kit | <= 1.4.11.1 | keine Korrektur |
| WordPress-Theme | Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme | <= 1.2.1 | keine Korrektur |
| WordPress-Theme | Angela | Family Planning & Pregnancy Clinic WordPress Theme | <= 1.4.3 | keine Korrektur |
| WordPress-Theme | AI ANN - AI Generator & AI Agency WordPress Theme | < 1.33.0 | 1.33.0 |
| WordPress-Theme | Anubia | Smoking and Hookah Bar WordPress Theme | <= 1.0.14 | keine Korrektur |
| WordPress-Theme | Artesia - Freelancer WordPress Theme | < 1.20.0 | 1.20.0 |
| WordPress-Theme | Asclepius - Doctor & Medical Theme | < 1.25.0 | 1.25.0 |
| WordPress-Theme | Belicia - Luxury Resort & Hotel Theme | < 1.14.0 | 1.14.0 |
| WordPress-Theme | BeYoga | Yogastudio & Gym WordPress Theme | < 2.8.0 | 2.8.0 |
| WordPress-Theme | Birdily | Travel Agency & Tour Booking WordPress Theme | <= 1.2.3 | keine Korrektur |
| WordPress-Theme | Bonko | Safari & Zoo WordPress Theme | <= 1.0.14 | keine Korrektur |
| WordPress-Theme | Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL | < 2.22.0 | 2.22.0 |
| WordPress-Theme | Callie Britt | Family Counselling Psychology WordPress Theme | <= 1.2.3 | 1.2.3.1 |
| WordPress-Theme | Camelia | Floral Studio Florist WordPress Theme | <= 1.2.14 | 1.2.14.1 |
| WordPress-Theme | Carlax | Car Parts Store & Auto Service WordPress Theme | <= 1.1.1 | keine Korrektur |
| WordPress-Theme | Carz — Car Dealer, Shop & Repair WordPress Theme | < 1.6.0 | 1.6.0 |
| WordPress-Theme | ChainPress | Financial Business Blog PSD Template | <= 1.0.14 | keine Korrektur |
| WordPress-Theme | Chakra - Yoga Retreat & Leisure Center WordPress Theme | < 1.19.0 | 1.19.0 |
| WordPress-Theme | Chardonnay - Wine Store & Vineyard WordPress Theme | < 1.26.0 | 1.26.0 |
| WordPress-Theme | Childy — Kids Store & Baby Clothing WordPress Theme | < 1.11.0 | 1.11.0 |
| WordPress-Theme | Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI | <= 2.2 | keine Korrektur |
| WordPress-Theme | City Hostel | Travel & Hotel Booking WordPress Theme | <= 1.2.3 | keine Korrektur |
| WordPress-Theme | 69 Clothing | Brand Store & Fashion Boutique WordPress Theme | <= 1.2.11 | 1.2.11.1 |
| WordPress-Theme | Corredo | Motorcycle & Bike Race Sports WordPress Theme | <= 1.1.14 | keine Korrektur |
| WordPress-Theme | Credit Card Experience | Loan Company and Online Banking WordPress Theme | <= 1.2.15 | keine Korrektur |
| WordPress-Theme | Crework | Coworking and Creative Space WordPress Theme | <= 1.1.11 | 1.1.12 |
| WordPress-Theme | Custom Made | Jewelry Manufacturer and Store WordPress Theme | <= 1.1.17 | keine Korrektur |
| WordPress-Theme | Def — CCTV & Bodyguard Security WordPress Theme | < 1.8.0 | 1.8.0 |
| WordPress-Theme | Drone Media | Aerial Photography & Videography Theme | < 2.8.0 | 2.8.0 |
| WordPress-Theme | Edema | Wellness & Spa WordPress Theme | < 1.2.2.1 | 1.2.2.1 |
| WordPress-Theme | Elementra - 100% Elementor WordPress Theme | <= 1.0.7 | 1.0.8 |
| WordPress-Theme | Fortunio - Carpenter, Forestry, Wood Manufacture Theme | < 2.12.0 | 2.12.0 |
| WordPress-Theme | Good Wine | Vineyard & Winery Shop WordPress Theme | <= 1.1.10 | keine Korrektur |
| WordPress-Theme | Gravity | Interior Design & Furniture Store WordPress Theme | <= 1.3.0 | keine Korrektur |
| WordPress-Theme | Gutentype | 100% Gutenberg Blog Theme + Elementor | <= 2.1.11 | 2.1.12 |
| WordPress-Theme | Hampton | Home Design and Renovation WordPress Theme | <= 1.3.3 | keine Korrektur |
| WordPress-Theme | Happy Rider - Horse School & Equestrian Center WordPress Theme | < 2.18.0 | 2.18.0 |
| WordPress-Theme | Healthy Blog - Blog WordPress Theme + Store | <= 1.2.8 | keine Korrektur |
| WordPress-Theme | Heaven11 | Property & Apartment Real Estate WordPress Theme | <= 1.0.9 | keine Korrektur |
| WordPress-Theme | Hello Summer | Children Camp WordPress Theme | <= 1.1.3 | keine Korrektur |
| WordPress-Theme | Hogwords | School, University Education WordPress Theme | <= 1.2.6 | keine Korrektur |
| WordPress-Theme | HotLock | Locksmith & Security Systems WordPress Theme + RTL | < 1.4.5 | 1.4.5 |
| WordPress-Theme | Inset - Digital Agency & IT Services WordPress Theme | < 1.21.0 | 1.21.0 |
| WordPress-Theme | Insurance Ancora - Finance WordPress Theme | < 2.16.0 | 2.16.0 |
| WordPress-Theme | Juno | Kids Toys & Games Store WordPress Theme | < 2.27.0 | 2.27.0 |
| WordPress-Theme | Kargo | Logistics & Transportation PSD Template | <= 1.1.13 | keine Korrektur |
| WordPress-Theme | Lab - Pharmacy, Laboratory & Research WordPress Theme | < 1.3.0 | 1.3.0 |
| WordPress-Theme | Laundry City | Dry Cleaning Services WordPress Theme | <= 1.2.17 | 1.2.18 |
| WordPress-Theme | MediaFlex - TV Channel & Streaming WordPress Theme | < 1.10.0 | 1.10.0 |
| WordPress-Theme | Nazareth | Church & Religion WordPress Theme | <= 1.0.16 | keine Korrektur |
| WordPress-Theme | OldStory - Whisky Bar | Pub | Restaurant Site Template | < 2.22.0 | 2.22.0 |
| WordPress-Theme | Partiso | Political Party & Candidate Elementor Template Kit | <= 1.1.12 | keine Korrektur |
| WordPress-Theme | PathWell | Senior Care WordPress Theme | <= 1.1.16 | 1.1.17 |
| WordPress-Theme | Planet Shakers | Church & Religion WordPress Theme | <= 1.0.7 | keine Korrektur |
| WordPress-Theme | Plastica - Plastic Surgery & Beauty WordPress Theme | < 1.12.0 | 1.12.0 |
| WordPress-Theme | Let's Play | Hockey School & Winter Sports WordPress Theme | <= 1.1.14 | keine Korrektur |
| WordPress-Theme | Podium | Fashion Model Agency WordPress Theme | <= 1.1.12 | keine Korrektur |
| WordPress-Theme | Preston | Fruit Company & Organic Farming WordPress Theme | <= 1.1.9 | keine Korrektur |
| WordPress-Theme | ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL | <= 1.5.9 | keine Korrektur |
| WordPress-Theme | ProGuards | Safety & Security Site Template | < 2.19.0 | 2.19.0 |
| WordPress-Theme | ProRange | Painting & Renovation Theme | < 2.12.0 | 2.12.0 |
| WordPress-Theme | Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT | < 3.6.0 | 3.6.0 |
| WordPress-Theme | Samadhi | Oriental Buddhist Temple WordPress Theme | <= 1.0.13 | keine Korrektur |
| WordPress-Theme | Smart Casa | Home Automation & House Technologies WordPress Theme | <= 1.0.11 | keine Korrektur |
| WordPress-Theme | SoccerClub - Football Team & Soccer League WordPress Theme | < 2.5.0 | 2.5.0 |
| WordPress-Theme | Softic - SaaS Software & Application WordPress Theme | < 1.17.0 | 1.17.0 |
| WordPress-Theme | Solio - Solar & Renewable Energy WordPress Theme | < 1.12.0 | 1.12.0 |
| WordPress-Theme | StevenWatkins - Personal Gym Trainer WordPress Theme | < 2.12.0 | 2.12.0 |
| WordPress-Theme | Stratego - Corporate Business & Consulting WordPress Theme | < 1.8.0 | 1.8.0 |
| WordPress-Theme | Studeon | Education Center & Training Courses WordPress Theme | <= 1.1.15 | keine Korrektur |
| WordPress-Theme | Tantra | Yoga Studio and Fitness Club WordPress Theme | < 2.9.0 | 2.9.0 |
| WordPress-Theme | Tax Help - Finance & Accounting Adviser Theme | < 2.23.0 | 2.23.0 |
| WordPress-Theme | Translang - Language Courses & Translation Services Elementor Template Kit | <= 1.1.16 | keine Korrektur |
| WordPress-Theme | Travesia | Travel Agency and Tour Booking WordPress Theme | <= 1.1.15 | keine Korrektur |
| WordPress-Theme | Vagabonds - Travel Blog Elementor Template Kit | <= 1.3.10 | keine Korrektur |
| WordPress-Theme | Wine House | Winery & Restaurant WordPress Theme | < 3.21.0 | 3.21.0 |
| WordPress-Theme | Wise Move | Relocation and Storage Services WordPress Theme | <= 1.1.15 | keine Korrektur |
| WordPress-Theme | WotaHub | Coworking Space WordPress Theme | <= 1.2.2 | keine Korrektur |
Verweise
CVSS-Wert
8.1/10
- CVSS-Vektor
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H- Schwäche (CWE)
CWE-98- Plattform
- WordPress
- Paket
Abogado - Lawyer WordPress Theme, Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor, Adrena | Airsoft Club & Paintball WordPress Theme- Veröffentlicht
- 09.06.2025
- Aktualisiert
- 11.10.2026 10:23
Quellen und Lizenzen
Wordfence Intelligence - dc82bfca-75de-4c77-a0ac-b34525b29a8d - Wordfence Intelligence
Copyright 1999-2026 The MITRE Corporation
Copyright 2012-2026 Defiant Inc.
This record contains material that is subject to copyright
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
https://www.cve.org/Legal/TermsOfUseCopyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/Wordfence Intelligence
Wordfence Intelligence - Defiant, Inc. Copyright Defiant, Inc. All rights reserved except as granted below. License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026): Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy. Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Schwachstellenhistorie: Albertino - Laboratory WordPress Theme
Alle veröffentlichten Schwachstellen dieses Pakets (WordPress-Theme), neueste zuerst. Zeigt, ob es ein einmaliger Ausrutscher ist oder ein Paket, das man im Auge behalten muss.
Dies ist die einzige bekannte Schwachstelle dieses Pakets.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.