Vulnerabilities in AncoraThemes
134 resultsVexday analysis
Com 128 CVEs catalogadas, o perfil de risco do AncoraThemes apresenta ausência de registros no catálogo KEV da CISA, situando-se abaixo da média geral do catálogo, e nenhuma vulnerabilidade surgiu nos últimos 90 dias, o que sugere um ritmo de descoberta atualmente inativo. Ainda assim, 12 falhas de severidade crítica merecem atenção contínua das equipes de segurança. O tipo de falha mais frequente é CWE-98 (Remote File Inclusion), uma classe que, quando explorada, pode resultar em execução remota de código — a CVE mais perigosa identificada atualmente é CVE-2026-22367, com pontuação EPSS de 0,0056, indicando probabilidade de exploração ainda baixa, mas que deve ser monitorada dado o impacto potencial dessa categoria de falha.
CVE-2025-60057HIGHWordPress DJ Rainflow theme <= 1.3.13 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-60042HIGHWordPress Chinchilla theme <= 1.16 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-49942HIGHWordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-60044HIGHWordPress Fribbo theme <= 1.1.0 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-49365HIGHWordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-60051HIGHWordPress Rare Radio theme <= 1.0.15.1 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-53430HIGHWordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-53429HIGHWordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-22375HIGHWordPress Impacto Patronus theme <= 1.2.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-48289CRITICALWordPress Kids Planet theme <= 2.2.14 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-69076HIGHWordPress Modern Housewife theme <= 1.0.12 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-69077HIGHWordPress Hobo theme <= 1.0.10 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-69061HIGHWordPress MoveMe theme <= 1.2.15 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-69062HIGHWordPress Weedles theme <= 1.1.12 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-69064HIGHWordPress Pets Land theme <= 1.2.8 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-69065HIGHWordPress Snow Mountain theme <= 1.4.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-22379HIGHWordPress Netmix theme <= 1.0.10 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-58902HIGHWordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-49072CRITICALWordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-69371CRITICALWordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerabilityEPSS 0.4%