CVE-2025-49941

CVE-2025-49941 affects the WordPress GlamChic theme (GlamChic) up to version 1.0.11. The issue is an improper control of filenames used in include/require statements, enabling Local File Inclusion (LFI) via PHP. Impact is described as high confidentiality, integrity, and availability risks in the...

CVE-2025-49371 WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Strux strux allows PHP Local File Inclusion.This issue affects Strux: from n/a through = 1.9...

CVE-2025-49370

CVE-2025-49370 affects the WordPress Lymcoin theme (AncoraThemes) up to version 1.3.12. The issue is an improper control of filenames for include/require statements, enabling PHP Local File Inclusion (LFI). Affected scope includes Lymcoin versions through 1.3.12; this vulnerability is categorized...

CVE-2025-49371

CVE-2025-49371 relates to a PHP Local File Inclusion in the WordPress Strux theme (versions

CVE-2025-49365 WordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Jack Well jack-well allows PHP Local File Inclusion.This issue affects Jack Well: from n/a through = 1.0.14...

CVE-2025-49367 WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Monyxi monyxi allows PHP Local File Inclusion.This issue affects Monyxi: from n/a through = 1.1.8...

CVE-2025-49368 WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Palladio palladio allows PHP Local File Inclusion.This issue affects Palladio: from n/a through = 1.1.10...

CVE-2025-49367 WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Monyxi monyxi allows PHP Local File Inclusion.This issue affects Monyxi: from n/a through = 1.1.8...

CVE-2025-49369 WordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Lettuce lettuce allows PHP Local File Inclusion.This issue affects Lettuce: from n/a through = 1.1.7...

CVE-2025-49365

CVE-2025-49365 covers a Local File Inclusion in the WordPress Jack Well theme (

CVE-2025-49367

This CVE concerns an improper control of filenames for include/require statements leading to Local File Inclusion in the WordPress Monyxi theme (AncoraThemes Monyxi). Affected product/version: Monyxi theme up to and including 1.1.8. Root cause: PHP file inclusion logic allows including arbitrary ...

CVE-2025-49369

CVE-2025-49369 affects the WordPress Lettuce theme (

CVE-2025-49366 WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Hanani hanani allows PHP Local File Inclusion.This issue affects Hanani: from n/a through = 1.2.11...

CVE-2025-49366

CVE-2025-49366 is a local file inclusion (LFI) vulnerability in the WordPress Hanani theme up to version 1.2.11 . The issue arises from improper control of filenames in PHP include/require statements, enabling an attacker to include local files. Affected product: AncoraThemes Hanani/Hanani WordPr...

CVE-2025-49368

The CVE-2025-49368 entry covers a Local File Inclusion in the WordPress Palladio theme (

CVE-2025-49368 WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Palladio palladio allows PHP Local File Inclusion.This issue affects Palladio: from n/a through = 1.1.10...

CVE-2025-49366 WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Hanani hanani allows PHP Local File Inclusion.This issue affects Hanani: from n/a through = 1.2.11...

CVE-2025-49363 WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Kings & Queens kings-queens allows PHP Local File Inclusion.This issue affects Kings & Queens: from n/a through = 1.1.16...

CVE-2025-49362 WordPress Gracioza theme <= 1.0.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Gracioza gracioza allows PHP Local File Inclusion.This issue affects Gracioza: from n/a through = 1.0.15...

CVE-2025-49359 WordPress ShieldGroup theme <= 2.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes ShieldGroup shieldgroup allows PHP Local File Inclusion.This issue affects ShieldGroup: from n/a through = 2.13...