Alta
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Tema de WordPress | Abogado - Lawyer WordPress Theme | < 1.18.0 | 1.18.0 |
| Tema de WordPress | Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor | <= 1.5.3 | sin corrección |
| Tema de WordPress | Adrena | Airsoft Club & Paintball WordPress Theme | <= 1.2.13 | sin corrección |
| Tema de WordPress | Advice - Psychology, Therapy & Counseling Theme | < 1.17.0 | 1.17.0 |
| Tema de WordPress | Agora — Event & Conference WordPress Theme | < 1.8.0 | 1.8.0 |
| Tema de WordPress | Alanzo | Chef & Event Catering WordPress Theme | <= 1.2.3 | 1.2.4 |
| Tema de WordPress | Albertino - Laboratory WordPress Theme | < 2.24.0.0 | 2.24.0.0 |
| Tema de WordPress | Alhambra | Mosque & Islamic WordPress Theme + RTL | <= 1.1.13 | sin corrección |
| Tema de WordPress | A.Williams | Assistant & Administrative Services WordPress Theme | <= 1.3.0 | 1.3.1 |
| Tema de WordPress | AlphaColor - Design & Printing Elementor Template Kit | <= 1.4.11.1 | sin corrección |
| Tema de WordPress | Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme | <= 1.2.1 | sin corrección |
| Tema de WordPress | Angela | Family Planning & Pregnancy Clinic WordPress Theme | <= 1.4.3 | sin corrección |
| Tema de WordPress | AI ANN - AI Generator & AI Agency WordPress Theme | < 1.33.0 | 1.33.0 |
| Tema de WordPress | Anubia | Smoking and Hookah Bar WordPress Theme | <= 1.0.14 | sin corrección |
| Tema de WordPress | Artesia - Freelancer WordPress Theme | < 1.20.0 | 1.20.0 |
| Tema de WordPress | Asclepius - Doctor & Medical Theme | < 1.25.0 | 1.25.0 |
| Tema de WordPress | Belicia - Luxury Resort & Hotel Theme | < 1.14.0 | 1.14.0 |
| Tema de WordPress | BeYoga | Yogastudio & Gym WordPress Theme | < 2.8.0 | 2.8.0 |
| Tema de WordPress | Birdily | Travel Agency & Tour Booking WordPress Theme | <= 1.2.3 | sin corrección |
| Tema de WordPress | Bonko | Safari & Zoo WordPress Theme | <= 1.0.14 | sin corrección |
| Tema de WordPress | Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL | < 2.22.0 | 2.22.0 |
| Tema de WordPress | Callie Britt | Family Counselling Psychology WordPress Theme | <= 1.2.3 | 1.2.3.1 |
| Tema de WordPress | Camelia | Floral Studio Florist WordPress Theme | <= 1.2.14 | 1.2.14.1 |
| Tema de WordPress | Carlax | Car Parts Store & Auto Service WordPress Theme | <= 1.1.1 | sin corrección |
| Tema de WordPress | Carz — Car Dealer, Shop & Repair WordPress Theme | < 1.6.0 | 1.6.0 |
| Tema de WordPress | ChainPress | Financial Business Blog PSD Template | <= 1.0.14 | sin corrección |
| Tema de WordPress | Chakra - Yoga Retreat & Leisure Center WordPress Theme | < 1.19.0 | 1.19.0 |
| Tema de WordPress | Chardonnay - Wine Store & Vineyard WordPress Theme | < 1.26.0 | 1.26.0 |
| Tema de WordPress | Childy — Kids Store & Baby Clothing WordPress Theme | < 1.11.0 | 1.11.0 |
| Tema de WordPress | Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI | <= 2.2 | sin corrección |
| Tema de WordPress | City Hostel | Travel & Hotel Booking WordPress Theme | <= 1.2.3 | sin corrección |
| Tema de WordPress | 69 Clothing | Brand Store & Fashion Boutique WordPress Theme | <= 1.2.11 | 1.2.11.1 |
| Tema de WordPress | Corredo | Motorcycle & Bike Race Sports WordPress Theme | <= 1.1.14 | sin corrección |
| Tema de WordPress | Credit Card Experience | Loan Company and Online Banking WordPress Theme | <= 1.2.15 | sin corrección |
| Tema de WordPress | Crework | Coworking and Creative Space WordPress Theme | <= 1.1.11 | 1.1.12 |
| Tema de WordPress | Custom Made | Jewelry Manufacturer and Store WordPress Theme | <= 1.1.17 | sin corrección |
| Tema de WordPress | Def — CCTV & Bodyguard Security WordPress Theme | < 1.8.0 | 1.8.0 |
| Tema de WordPress | Drone Media | Aerial Photography & Videography Theme | < 2.8.0 | 2.8.0 |
| Tema de WordPress | Edema | Wellness & Spa WordPress Theme | < 1.2.2.1 | 1.2.2.1 |
| Tema de WordPress | Elementra - 100% Elementor WordPress Theme | <= 1.0.7 | 1.0.8 |
| Tema de WordPress | Fortunio - Carpenter, Forestry, Wood Manufacture Theme | < 2.12.0 | 2.12.0 |
| Tema de WordPress | Good Wine | Vineyard & Winery Shop WordPress Theme | <= 1.1.10 | sin corrección |
| Tema de WordPress | Gravity | Interior Design & Furniture Store WordPress Theme | <= 1.3.0 | sin corrección |
| Tema de WordPress | Gutentype | 100% Gutenberg Blog Theme + Elementor | <= 2.1.11 | 2.1.12 |
| Tema de WordPress | Hampton | Home Design and Renovation WordPress Theme | <= 1.3.3 | sin corrección |
| Tema de WordPress | Happy Rider - Horse School & Equestrian Center WordPress Theme | < 2.18.0 | 2.18.0 |
| Tema de WordPress | Healthy Blog - Blog WordPress Theme + Store | <= 1.2.8 | sin corrección |
| Tema de WordPress | Heaven11 | Property & Apartment Real Estate WordPress Theme | <= 1.0.9 | sin corrección |
| Tema de WordPress | Hello Summer | Children Camp WordPress Theme | <= 1.1.3 | sin corrección |
| Tema de WordPress | Hogwords | School, University Education WordPress Theme | <= 1.2.6 | sin corrección |
| Tema de WordPress | HotLock | Locksmith & Security Systems WordPress Theme + RTL | < 1.4.5 | 1.4.5 |
| Tema de WordPress | Inset - Digital Agency & IT Services WordPress Theme | < 1.21.0 | 1.21.0 |
| Tema de WordPress | Insurance Ancora - Finance WordPress Theme | < 2.16.0 | 2.16.0 |
| Tema de WordPress | Juno | Kids Toys & Games Store WordPress Theme | < 2.27.0 | 2.27.0 |
| Tema de WordPress | Kargo | Logistics & Transportation PSD Template | <= 1.1.13 | sin corrección |
| Tema de WordPress | Lab - Pharmacy, Laboratory & Research WordPress Theme | < 1.3.0 | 1.3.0 |
| Tema de WordPress | Laundry City | Dry Cleaning Services WordPress Theme | <= 1.2.17 | 1.2.18 |
| Tema de WordPress | MediaFlex - TV Channel & Streaming WordPress Theme | < 1.10.0 | 1.10.0 |
| Tema de WordPress | Nazareth | Church & Religion WordPress Theme | <= 1.0.16 | sin corrección |
| Tema de WordPress | OldStory - Whisky Bar | Pub | Restaurant Site Template | < 2.22.0 | 2.22.0 |
| Tema de WordPress | Partiso | Political Party & Candidate Elementor Template Kit | <= 1.1.12 | sin corrección |
| Tema de WordPress | PathWell | Senior Care WordPress Theme | <= 1.1.16 | 1.1.17 |
| Tema de WordPress | Planet Shakers | Church & Religion WordPress Theme | <= 1.0.7 | sin corrección |
| Tema de WordPress | Plastica - Plastic Surgery & Beauty WordPress Theme | < 1.12.0 | 1.12.0 |
| Tema de WordPress | Let's Play | Hockey School & Winter Sports WordPress Theme | <= 1.1.14 | sin corrección |
| Tema de WordPress | Podium | Fashion Model Agency WordPress Theme | <= 1.1.12 | sin corrección |
| Tema de WordPress | Preston | Fruit Company & Organic Farming WordPress Theme | <= 1.1.9 | sin corrección |
| Tema de WordPress | ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL | <= 1.5.9 | sin corrección |
| Tema de WordPress | ProGuards | Safety & Security Site Template | < 2.19.0 | 2.19.0 |
| Tema de WordPress | ProRange | Painting & Renovation Theme | < 2.12.0 | 2.12.0 |
| Tema de WordPress | Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT | < 3.6.0 | 3.6.0 |
| Tema de WordPress | Samadhi | Oriental Buddhist Temple WordPress Theme | <= 1.0.13 | sin corrección |
| Tema de WordPress | Smart Casa | Home Automation & House Technologies WordPress Theme | <= 1.0.11 | sin corrección |
| Tema de WordPress | SoccerClub - Football Team & Soccer League WordPress Theme | < 2.5.0 | 2.5.0 |
| Tema de WordPress | Softic - SaaS Software & Application WordPress Theme | < 1.17.0 | 1.17.0 |
| Tema de WordPress | Solio - Solar & Renewable Energy WordPress Theme | < 1.12.0 | 1.12.0 |
| Tema de WordPress | StevenWatkins - Personal Gym Trainer WordPress Theme | < 2.12.0 | 2.12.0 |
| Tema de WordPress | Stratego - Corporate Business & Consulting WordPress Theme | < 1.8.0 | 1.8.0 |
| Tema de WordPress | Studeon | Education Center & Training Courses WordPress Theme | <= 1.1.15 | sin corrección |
| Tema de WordPress | Tantra | Yoga Studio and Fitness Club WordPress Theme | < 2.9.0 | 2.9.0 |
| Tema de WordPress | Tax Help - Finance & Accounting Adviser Theme | < 2.23.0 | 2.23.0 |
| Tema de WordPress | Translang - Language Courses & Translation Services Elementor Template Kit | <= 1.1.16 | sin corrección |
| Tema de WordPress | Travesia | Travel Agency and Tour Booking WordPress Theme | <= 1.1.15 | sin corrección |
| Tema de WordPress | Vagabonds - Travel Blog Elementor Template Kit | <= 1.3.10 | sin corrección |
| Tema de WordPress | Wine House | Winery & Restaurant WordPress Theme | < 3.21.0 | 3.21.0 |
| Tema de WordPress | Wise Move | Relocation and Storage Services WordPress Theme | <= 1.1.15 | sin corrección |
| Tema de WordPress | WotaHub | Coworking Space WordPress Theme | <= 1.2.2 | sin corrección |
Referencias
Puntuación CVSS
8.1/10
- Vector CVSS
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H- Debilidad (CWE)
CWE-98- Plataforma
- WordPress
- Paquete
Abogado - Lawyer WordPress Theme, Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor, Adrena | Airsoft Club & Paintball WordPress Theme- Publicada
- 09.06.2025
- Actualizado
- 11.10.2026 10:23
Fuentes y licencias
Wordfence Intelligence - dc82bfca-75de-4c77-a0ac-b34525b29a8d - Wordfence Intelligence
Copyright 1999-2026 The MITRE Corporation
Copyright 2012-2026 Defiant Inc.
This record contains material that is subject to copyright
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
https://www.cve.org/Legal/TermsOfUseCopyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/Wordfence Intelligence
Wordfence Intelligence - Defiant, Inc. Copyright Defiant, Inc. All rights reserved except as granted below. License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026): Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy. Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Historial de vulnerabilidades: Alhambra | Mosque & Islamic WordPress Theme + RTL
Todas las vulnerabilidades publicadas de este paquete (Tema de WordPress), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
Esta es la única vulnerabilidad conocida de este paquete.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.