CVE-2025-49369 WordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Lettuce lettuce allows PHP Local File Inclusion.This issue affects Lettuce: from n/a through = 1.1.7...

CVE-2025-49366 WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Hanani hanani allows PHP Local File Inclusion.This issue affects Hanani: from n/a through = 1.2.11...

CVE-2025-49368

The CVE-2025-49368 entry covers a Local File Inclusion in the WordPress Palladio theme (

CVE-2025-49366 WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Hanani hanani allows PHP Local File Inclusion.This issue affects Hanani: from n/a through = 1.2.11...

CVE-2025-49367 WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Monyxi monyxi allows PHP Local File Inclusion.This issue affects Monyxi: from n/a through = 1.1.8...

CVE-2025-49368 WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Palladio palladio allows PHP Local File Inclusion.This issue affects Palladio: from n/a through = 1.1.10...

CVE-2025-49366

CVE-2025-49366 is a local file inclusion (LFI) vulnerability in the WordPress Hanani theme up to version 1.2.11 . The issue arises from improper control of filenames in PHP include/require statements, enabling an attacker to include local files. Affected product: AncoraThemes Hanani/Hanani WordPr...

CVE-2025-49367

This CVE concerns an improper control of filenames for include/require statements leading to Local File Inclusion in the WordPress Monyxi theme (AncoraThemes Monyxi). Affected product/version: Monyxi theme up to and including 1.1.8. Root cause: PHP file inclusion logic allows including arbitrary ...

CVE-2025-49367 WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Monyxi monyxi allows PHP Local File Inclusion.This issue affects Monyxi: from n/a through = 1.1.8...

CVE-2025-49365

CVE-2025-49365 covers a Local File Inclusion in the WordPress Jack Well theme (

CVE-2025-49365 WordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Jack Well jack-well allows PHP Local File Inclusion.This issue affects Jack Well: from n/a through = 1.0.14...

CVE-2025-49369

CVE-2025-49369 affects the WordPress Lettuce theme (

CVE-2025-49359 WordPress ShieldGroup theme <= 2.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes ShieldGroup shieldgroup allows PHP Local File Inclusion.This issue affects ShieldGroup: from n/a through = 2.13...

CVE-2025-49363 WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Kings & Queens kings-queens allows PHP Local File Inclusion.This issue affects Kings & Queens: from n/a through = 1.1.16...

CVE-2025-49362

The CVE-2025-49362 entry concerns the WordPress plugin/theme Gracioza (AncoraThemes Gracioza) with versions up to 1.0.15, describing an improper control of filename for include/require statements that leads to a PHP Local File Inclusion vulnerability. The issue affects Gracioza 1.0.15 and earlier...

CVE-2025-49363 WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Kings & Queens kings-queens allows PHP Local File Inclusion.This issue affects Kings & Queens: from n/a through = 1.1.16...

CVE-2025-49360

CVE-2025-49360 concerns the WordPress Militarology theme (versions through 1.0.15). The vulnerability is an improper control of filenames for include/require statements, enabling local file inclusion (LFI) via PHP. The issue affects Militarology up to 1.0.15 and is categorized with high impact (c...

CVE-2025-49361 WordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Mamita mamita allows PHP Local File Inclusion.This issue affects Mamita: from n/a through = 1.0.9...

PT-2025-52070

Name of the Vulnerable Software and Affected Versions AncoraThemes Otaku versions through 1.8.0 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

PT-2025-52024

Name of the Vulnerable Software and Affected Versions AncoraThemes Faith & Hope versions through 2.13.0 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...