Wysoka
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
Czego dotyczy
Kliknij technologię, aby zobaczyć wszystkie dotyczące jej podatności.
| Platforma | Paczka | Podatne wersje | Poprawka w wersji |
|---|---|---|---|
| Motyw WordPress | Abogado - Lawyer WordPress Theme | < 1.18.0 | 1.18.0 |
| Motyw WordPress | Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor | <= 1.5.3 | brak poprawki |
| Motyw WordPress | Adrena | Airsoft Club & Paintball WordPress Theme | <= 1.2.13 | brak poprawki |
| Motyw WordPress | Advice - Psychology, Therapy & Counseling Theme | < 1.17.0 | 1.17.0 |
| Motyw WordPress | Agora — Event & Conference WordPress Theme | < 1.8.0 | 1.8.0 |
| Motyw WordPress | Alanzo | Chef & Event Catering WordPress Theme | <= 1.2.3 | 1.2.4 |
| Motyw WordPress | Albertino - Laboratory WordPress Theme | < 2.24.0.0 | 2.24.0.0 |
| Motyw WordPress | Alhambra | Mosque & Islamic WordPress Theme + RTL | <= 1.1.13 | brak poprawki |
| Motyw WordPress | A.Williams | Assistant & Administrative Services WordPress Theme | <= 1.3.0 | 1.3.1 |
| Motyw WordPress | AlphaColor - Design & Printing Elementor Template Kit | <= 1.4.11.1 | brak poprawki |
| Motyw WordPress | Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme | <= 1.2.1 | brak poprawki |
| Motyw WordPress | Angela | Family Planning & Pregnancy Clinic WordPress Theme | <= 1.4.3 | brak poprawki |
| Motyw WordPress | AI ANN - AI Generator & AI Agency WordPress Theme | < 1.33.0 | 1.33.0 |
| Motyw WordPress | Anubia | Smoking and Hookah Bar WordPress Theme | <= 1.0.14 | brak poprawki |
| Motyw WordPress | Artesia - Freelancer WordPress Theme | < 1.20.0 | 1.20.0 |
| Motyw WordPress | Asclepius - Doctor & Medical Theme | < 1.25.0 | 1.25.0 |
| Motyw WordPress | Belicia - Luxury Resort & Hotel Theme | < 1.14.0 | 1.14.0 |
| Motyw WordPress | BeYoga | Yogastudio & Gym WordPress Theme | < 2.8.0 | 2.8.0 |
| Motyw WordPress | Birdily | Travel Agency & Tour Booking WordPress Theme | <= 1.2.3 | brak poprawki |
| Motyw WordPress | Bonko | Safari & Zoo WordPress Theme | <= 1.0.14 | brak poprawki |
| Motyw WordPress | Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL | < 2.22.0 | 2.22.0 |
| Motyw WordPress | Callie Britt | Family Counselling Psychology WordPress Theme | <= 1.2.3 | 1.2.3.1 |
| Motyw WordPress | Camelia | Floral Studio Florist WordPress Theme | <= 1.2.14 | 1.2.14.1 |
| Motyw WordPress | Carlax | Car Parts Store & Auto Service WordPress Theme | <= 1.1.1 | brak poprawki |
| Motyw WordPress | Carz — Car Dealer, Shop & Repair WordPress Theme | < 1.6.0 | 1.6.0 |
| Motyw WordPress | ChainPress | Financial Business Blog PSD Template | <= 1.0.14 | brak poprawki |
| Motyw WordPress | Chakra - Yoga Retreat & Leisure Center WordPress Theme | < 1.19.0 | 1.19.0 |
| Motyw WordPress | Chardonnay - Wine Store & Vineyard WordPress Theme | < 1.26.0 | 1.26.0 |
| Motyw WordPress | Childy — Kids Store & Baby Clothing WordPress Theme | < 1.11.0 | 1.11.0 |
| Motyw WordPress | Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI | <= 2.2 | brak poprawki |
| Motyw WordPress | City Hostel | Travel & Hotel Booking WordPress Theme | <= 1.2.3 | brak poprawki |
| Motyw WordPress | 69 Clothing | Brand Store & Fashion Boutique WordPress Theme | <= 1.2.11 | 1.2.11.1 |
| Motyw WordPress | Corredo | Motorcycle & Bike Race Sports WordPress Theme | <= 1.1.14 | brak poprawki |
| Motyw WordPress | Credit Card Experience | Loan Company and Online Banking WordPress Theme | <= 1.2.15 | brak poprawki |
| Motyw WordPress | Crework | Coworking and Creative Space WordPress Theme | <= 1.1.11 | 1.1.12 |
| Motyw WordPress | Custom Made | Jewelry Manufacturer and Store WordPress Theme | <= 1.1.17 | brak poprawki |
| Motyw WordPress | Def — CCTV & Bodyguard Security WordPress Theme | < 1.8.0 | 1.8.0 |
| Motyw WordPress | Drone Media | Aerial Photography & Videography Theme | < 2.8.0 | 2.8.0 |
| Motyw WordPress | Edema | Wellness & Spa WordPress Theme | < 1.2.2.1 | 1.2.2.1 |
| Motyw WordPress | Elementra - 100% Elementor WordPress Theme | <= 1.0.7 | 1.0.8 |
| Motyw WordPress | Fortunio - Carpenter, Forestry, Wood Manufacture Theme | < 2.12.0 | 2.12.0 |
| Motyw WordPress | Good Wine | Vineyard & Winery Shop WordPress Theme | <= 1.1.10 | brak poprawki |
| Motyw WordPress | Gravity | Interior Design & Furniture Store WordPress Theme | <= 1.3.0 | brak poprawki |
| Motyw WordPress | Gutentype | 100% Gutenberg Blog Theme + Elementor | <= 2.1.11 | 2.1.12 |
| Motyw WordPress | Hampton | Home Design and Renovation WordPress Theme | <= 1.3.3 | brak poprawki |
| Motyw WordPress | Happy Rider - Horse School & Equestrian Center WordPress Theme | < 2.18.0 | 2.18.0 |
| Motyw WordPress | Healthy Blog - Blog WordPress Theme + Store | <= 1.2.8 | brak poprawki |
| Motyw WordPress | Heaven11 | Property & Apartment Real Estate WordPress Theme | <= 1.0.9 | brak poprawki |
| Motyw WordPress | Hello Summer | Children Camp WordPress Theme | <= 1.1.3 | brak poprawki |
| Motyw WordPress | Hogwords | School, University Education WordPress Theme | <= 1.2.6 | brak poprawki |
| Motyw WordPress | HotLock | Locksmith & Security Systems WordPress Theme + RTL | < 1.4.5 | 1.4.5 |
| Motyw WordPress | Inset - Digital Agency & IT Services WordPress Theme | < 1.21.0 | 1.21.0 |
| Motyw WordPress | Insurance Ancora - Finance WordPress Theme | < 2.16.0 | 2.16.0 |
| Motyw WordPress | Juno | Kids Toys & Games Store WordPress Theme | < 2.27.0 | 2.27.0 |
| Motyw WordPress | Kargo | Logistics & Transportation PSD Template | <= 1.1.13 | brak poprawki |
| Motyw WordPress | Lab - Pharmacy, Laboratory & Research WordPress Theme | < 1.3.0 | 1.3.0 |
| Motyw WordPress | Laundry City | Dry Cleaning Services WordPress Theme | <= 1.2.17 | 1.2.18 |
| Motyw WordPress | MediaFlex - TV Channel & Streaming WordPress Theme | < 1.10.0 | 1.10.0 |
| Motyw WordPress | Nazareth | Church & Religion WordPress Theme | <= 1.0.16 | brak poprawki |
| Motyw WordPress | OldStory - Whisky Bar | Pub | Restaurant Site Template | < 2.22.0 | 2.22.0 |
| Motyw WordPress | Partiso | Political Party & Candidate Elementor Template Kit | <= 1.1.12 | brak poprawki |
| Motyw WordPress | PathWell | Senior Care WordPress Theme | <= 1.1.16 | 1.1.17 |
| Motyw WordPress | Planet Shakers | Church & Religion WordPress Theme | <= 1.0.7 | brak poprawki |
| Motyw WordPress | Plastica - Plastic Surgery & Beauty WordPress Theme | < 1.12.0 | 1.12.0 |
| Motyw WordPress | Let's Play | Hockey School & Winter Sports WordPress Theme | <= 1.1.14 | brak poprawki |
| Motyw WordPress | Podium | Fashion Model Agency WordPress Theme | <= 1.1.12 | brak poprawki |
| Motyw WordPress | Preston | Fruit Company & Organic Farming WordPress Theme | <= 1.1.9 | brak poprawki |
| Motyw WordPress | ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL | <= 1.5.9 | brak poprawki |
| Motyw WordPress | ProGuards | Safety & Security Site Template | < 2.19.0 | 2.19.0 |
| Motyw WordPress | ProRange | Painting & Renovation Theme | < 2.12.0 | 2.12.0 |
| Motyw WordPress | Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT | < 3.6.0 | 3.6.0 |
| Motyw WordPress | Samadhi | Oriental Buddhist Temple WordPress Theme | <= 1.0.13 | brak poprawki |
| Motyw WordPress | Smart Casa | Home Automation & House Technologies WordPress Theme | <= 1.0.11 | brak poprawki |
| Motyw WordPress | SoccerClub - Football Team & Soccer League WordPress Theme | < 2.5.0 | 2.5.0 |
| Motyw WordPress | Softic - SaaS Software & Application WordPress Theme | < 1.17.0 | 1.17.0 |
| Motyw WordPress | Solio - Solar & Renewable Energy WordPress Theme | < 1.12.0 | 1.12.0 |
| Motyw WordPress | StevenWatkins - Personal Gym Trainer WordPress Theme | < 2.12.0 | 2.12.0 |
| Motyw WordPress | Stratego - Corporate Business & Consulting WordPress Theme | < 1.8.0 | 1.8.0 |
| Motyw WordPress | Studeon | Education Center & Training Courses WordPress Theme | <= 1.1.15 | brak poprawki |
| Motyw WordPress | Tantra | Yoga Studio and Fitness Club WordPress Theme | < 2.9.0 | 2.9.0 |
| Motyw WordPress | Tax Help - Finance & Accounting Adviser Theme | < 2.23.0 | 2.23.0 |
| Motyw WordPress | Translang - Language Courses & Translation Services Elementor Template Kit | <= 1.1.16 | brak poprawki |
| Motyw WordPress | Travesia | Travel Agency and Tour Booking WordPress Theme | <= 1.1.15 | brak poprawki |
| Motyw WordPress | Vagabonds - Travel Blog Elementor Template Kit | <= 1.3.10 | brak poprawki |
| Motyw WordPress | Wine House | Winery & Restaurant WordPress Theme | < 3.21.0 | 3.21.0 |
| Motyw WordPress | Wise Move | Relocation and Storage Services WordPress Theme | <= 1.1.15 | brak poprawki |
| Motyw WordPress | WotaHub | Coworking Space WordPress Theme | <= 1.2.2 | brak poprawki |
Odnośniki
Ocena CVSS
8.1/10
- Wektor CVSS
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H- Słabość (CWE)
CWE-98- Platforma
- WordPress
- Paczka
Abogado - Lawyer WordPress Theme, Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor, Adrena | Airsoft Club & Paintball WordPress Theme- Ujawniono
- 09.06.2025
- Aktualizacja
- 11.10.2026 10:23
Źródła i licencje
Wordfence Intelligence - dc82bfca-75de-4c77-a0ac-b34525b29a8d - Wordfence Intelligence
Copyright 1999-2026 The MITRE Corporation
Copyright 2012-2026 Defiant Inc.
This record contains material that is subject to copyright
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
https://www.cve.org/Legal/TermsOfUseCopyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/Wordfence Intelligence
Wordfence Intelligence - Defiant, Inc. Copyright Defiant, Inc. All rights reserved except as granted below. License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026): Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy. Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Historia podatności: Adrena | Airsoft Club & Paintball WordPress Theme
Wszystkie opisane podatności tej paczki (Motyw WordPress), od najnowszej. Widać, czy to jednorazowa wpadka, czy paczka, której trzeba pilnować.
- Wszystkich wpisów
- 2
- Pierwsza → ostatnia
- 06.2025 08.2026
- Bez poprawki
- 2
- Wykorzystywana w atakach
- 0
Rozkład istotności
- Wysoka 2
Ujawnienia w latach
- 2025: 1
- 2026: 1
-
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion ten wpis
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.