CVE-2026-22371

CVE-2026-22371: WordPress theme Gustavo (AncoraThemes)

CVE-2026-22372

CVE-2026-22372: WordPress Isida theme <= 1.4.2 has an improper control of filenames for PHP include/require statements, yielding Local File Inclusion. Affected software: AncoraThemes Isida WordPress theme versions up to 1.4.2. Publicly available documents describe the vulnerability and affecte...

CVE-2026-22372 WordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Isida isida allows PHP Local File Inclusion.This issue affects Isida: from n/a through = 1.4.2...

CVE-2026-22371

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Gustavo gustavo allows PHP Local File Inclusion.This issue affects Gustavo: from n/a through = 1.2.2...

CVE-2026-22368 WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through = 1.0.2...

CVE-2026-22368

CVE-2026-22368 describes an Unauthenticated PHP Local File Inclusion (LFI) in the WordPress theme Redy (axiomthemes)

CVE-2026-22368 WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through = 1.0.2...

CVE-2026-22368

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through = 1.0.2...

CVE-2026-22366

CVE-2026-22366: WordPress Jude theme (Jude) versions up to and including 1.3.0 suffer an unauthenticated Local File Inclusion due to improper control of the filename in include/require PHP statements. Reported as a high-severity issue (CVSS v3.1 base score 8.1) with impact on confidentiality, int...

CVE-2026-22366 WordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Jude jude allows PHP Local File Inclusion.This issue affects Jude: from n/a through = 1.3.0...

CVE-2026-22370

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through = 1.3.0...

CVE-2026-22369

CVE-2026-22369 concerns WordPress theme Ironfit by AncoraThemes (versions through 1.5). The vulnerability is a local file inclusion (LFI) caused by improper control of filenames in include/require statements in PHP. The impact is high (CVE base score 8.1, Confidentiality/Integrity/Availability: H...

CVE-2026-22369 WordPress Ironfit theme <= 1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Ironfit ironfit allows PHP Local File Inclusion.This issue affects Ironfit: from n/a through = 1.5...

CVE-2026-22369 WordPress Ironfit theme <= 1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Ironfit ironfit allows PHP Local File Inclusion.This issue affects Ironfit: from n/a through = 1.5...

CVE-2026-22370 WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through = 1.3.0...

CVE-2026-22367 WordPress Coworking theme <= 1.6.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Coworking coworking allows PHP Local File Inclusion.This issue affects Coworking: from n/a through = 1.6.1...

CVE-2026-22364

CVE-2026-22364 concerns the WordPress theme SevenTrees (axiomthemes) with an Unauthenticated Local File Inclusion via improper Filename include/require control in PHP. The issue affects SevenTrees versions up to 1.0.2; public sources indicate the vulnerability is currently Unpatched with no patch...

CVE-2026-22363

CVE-2026-22363 is a Local File Inclusion (LFI) in the WordPress Rhodos theme (

CVE-2026-22362 WordPress Photolia theme <= 1.0.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Photolia photolia allows PHP Local File Inclusion.This issue affects Photolia: from n/a through = 1.0.3...

CVE-2026-22364 WordPress SevenTrees theme <=1.0.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes SevenTrees seventrees allows PHP Local File Inclusion.This issue affects SevenTrees: from n/a through =1.0.2...