Radar sectionsDatabase
Check my site
WordPress theme

Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 — Unauthenticated Local File Inclusion

CVE-2025-26592Published · Updated

Action summary

Gutentype | 100% Gutenberg Blog Theme + Elementor: Affected: ≤2.1.11Update to 2.1.12 or newer

Abogado - Lawyer WordPress Theme: Affected: <1.18.0Update to 1.18.0 or newer

Drone Media | Aerial Photography & Videography Theme: Affected: <2.8.0Update to 2.8.0 or newer

Camelia | Floral Studio Florist WordPress Theme: Affected: ≤1.2.14Update to 1.2.14.1 or newer

Agora — Event & Conference WordPress Theme: Affected: <1.8.0Update to 1.8.0 or newer

AI ANN - AI Generator & AI Agency WordPress Theme: Affected: <1.33.0Update to 1.33.0 or newer

Adrena | Airsoft Club & Paintball WordPress Theme: Affected: ≤1.2.13No patch available

Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme: Affected: ≤1.2.1No patch available

Travesia | Travel Agency and Tour Booking WordPress Theme: Affected: ≤1.1.15No patch available

Elementra - 100% Elementor WordPress Theme: Affected: ≤1.0.7Update to 1.0.8 or newer

Edema | Wellness & Spa WordPress Theme: Affected: <1.2.2.1Update to 1.2.2.1 or newer

Advice - Psychology, Therapy & Counseling Theme: Affected: <1.17.0Update to 1.17.0 or newer

Partiso | Political Party & Candidate Elementor Template Kit: Affected: ≤1.1.12No patch available

Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT: Affected: <3.6.0Update to 3.6.0 or newer

Let's Play | Hockey School & Winter Sports WordPress Theme: Affected: ≤1.1.14No patch available

Tantra | Yoga Studio and Fitness Club WordPress Theme: Affected: <2.9.0Update to 2.9.0 or newer

Vagabonds - Travel Blog Elementor Template Kit: Affected: ≤1.3.10No patch available

Hogwords | School, University Education WordPress Theme: Affected: ≤1.2.6No patch available

HotLock | Locksmith & Security Systems WordPress Theme + RTL: Affected: <1.4.5Update to 1.4.5 or newer

Wine House | Winery & Restaurant WordPress Theme: Affected: <3.21.0Update to 3.21.0 or newer

Smart Casa | Home Automation & House Technologies WordPress Theme: Affected: ≤1.0.11No patch available

Wise Move | Relocation and Storage Services WordPress Theme: Affected: ≤1.1.15No patch available

MediaFlex - TV Channel & Streaming WordPress Theme: Affected: <1.10.0Update to 1.10.0 or newer

Alhambra | Mosque & Islamic WordPress Theme + RTL: Affected: ≤1.1.13No patch available

Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL: Affected: <2.22.0Update to 2.22.0 or newer

OldStory - Whisky Bar | Pub | Restaurant Site Template: Affected: <2.22.0Update to 2.22.0 or newer

Birdily | Travel Agency & Tour Booking WordPress Theme: Affected: ≤1.2.3No patch available

ProRange | Painting & Renovation Theme: Affected: <2.12.0Update to 2.12.0 or newer

Childy — Kids Store & Baby Clothing WordPress Theme: Affected: <1.11.0Update to 1.11.0 or newer

Def — CCTV & Bodyguard Security WordPress Theme: Affected: <1.8.0Update to 1.8.0 or newer

Podium | Fashion Model Agency WordPress Theme: Affected: ≤1.1.12No patch available

Belicia - Luxury Resort & Hotel Theme: Affected: <1.14.0Update to 1.14.0 or newer

Chakra - Yoga Retreat & Leisure Center WordPress Theme: Affected: <1.19.0Update to 1.19.0 or newer

Corredo | Motorcycle & Bike Race Sports WordPress Theme: Affected: ≤1.1.14No patch available

BeYoga | Yogastudio & Gym WordPress Theme: Affected: <2.8.0Update to 2.8.0 or newer

69 Clothing | Brand Store & Fashion Boutique WordPress Theme: Affected: ≤1.2.11Update to 1.2.11.1 or newer

Alanzo | Chef & Event Catering WordPress Theme: Affected: ≤1.2.3Update to 1.2.4 or newer

PathWell | Senior Care WordPress Theme: Affected: ≤1.1.16Update to 1.1.17 or newer

Hampton | Home Design and Renovation WordPress Theme: Affected: ≤1.3.3No patch available

Carlax | Car Parts Store & Auto Service WordPress Theme: Affected: ≤1.1.1No patch available

Softic - SaaS Software & Application WordPress Theme: Affected: <1.17.0Update to 1.17.0 or newer

Juno | Kids Toys & Games Store WordPress Theme: Affected: <2.27.0Update to 2.27.0 or newer

Solio - Solar & Renewable Energy WordPress Theme: Affected: <1.12.0Update to 1.12.0 or newer

Heaven11 | Property & Apartment Real Estate WordPress Theme: Affected: ≤1.0.9No patch available

Gravity | Interior Design & Furniture Store WordPress Theme: Affected: ≤1.3.0No patch available

Insurance Ancora - Finance WordPress Theme: Affected: <2.16.0Update to 2.16.0 or newer

Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI: Affected: ≤2.2No patch available

Hello Summer | Children Camp WordPress Theme: Affected: ≤1.1.3No patch available

ChainPress | Financial Business Blog PSD Template: Affected: ≤1.0.14No patch available

Albertino - Laboratory WordPress Theme: Affected: <2.24.0.0Update to 2.24.0.0 or newer

Planet Shakers | Church & Religion WordPress Theme: Affected: ≤1.0.7No patch available

Samadhi | Oriental Buddhist Temple WordPress Theme: Affected: ≤1.0.13No patch available

Callie Britt | Family Counselling Psychology WordPress Theme: Affected: ≤1.2.3Update to 1.2.3.1 or newer

Plastica - Plastic Surgery & Beauty WordPress Theme: Affected: <1.12.0Update to 1.12.0 or newer

Credit Card Experience | Loan Company and Online Banking WordPress Theme: Affected: ≤1.2.15No patch available

Laundry City | Dry Cleaning Services WordPress Theme: Affected: ≤1.2.17Update to 1.2.18 or newer

Tax Help - Finance & Accounting Adviser Theme: Affected: <2.23.0Update to 2.23.0 or newer

Chardonnay - Wine Store & Vineyard WordPress Theme: Affected: <1.26.0Update to 1.26.0 or newer

Angela | Family Planning & Pregnancy Clinic WordPress Theme: Affected: ≤1.4.3No patch available

Anubia | Smoking and Hookah Bar WordPress Theme: Affected: ≤1.0.14No patch available

Artesia - Freelancer WordPress Theme: Affected: <1.20.0Update to 1.20.0 or newer

Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor: Affected: ≤1.5.3No patch available

Healthy Blog - Blog WordPress Theme + Store: Affected: ≤1.2.8No patch available

Custom Made | Jewelry Manufacturer and Store WordPress Theme: Affected: ≤1.1.17No patch available

Stratego - Corporate Business & Consulting WordPress Theme: Affected: <1.8.0Update to 1.8.0 or newer

A.Williams | Assistant & Administrative Services WordPress Theme: Affected: ≤1.3.0Update to 1.3.1 or newer

StevenWatkins - Personal Gym Trainer WordPress Theme: Affected: <2.12.0Update to 2.12.0 or newer

Inset - Digital Agency & IT Services WordPress Theme: Affected: <1.21.0Update to 1.21.0 or newer

Crework | Coworking and Creative Space WordPress Theme: Affected: ≤1.1.11Update to 1.1.12 or newer

Happy Rider - Horse School & Equestrian Center WordPress Theme: Affected: <2.18.0Update to 2.18.0 or newer

Kargo | Logistics & Transportation PSD Template: Affected: ≤1.1.13No patch available

Carz — Car Dealer, Shop & Repair WordPress Theme: Affected: <1.6.0Update to 1.6.0 or newer

AlphaColor - Design & Printing Elementor Template Kit: Affected: ≤1.4.11.1No patch available

WotaHub | Coworking Space WordPress Theme: Affected: ≤1.2.2No patch available

SoccerClub - Football Team & Soccer League WordPress Theme: Affected: <2.5.0Update to 2.5.0 or newer

Asclepius - Doctor & Medical Theme: Affected: <1.25.0Update to 1.25.0 or newer

Fortunio - Carpenter, Forestry, Wood Manufacture Theme: Affected: <2.12.0Update to 2.12.0 or newer

Good Wine | Vineyard & Winery Shop WordPress Theme: Affected: ≤1.1.10No patch available

Lab - Pharmacy, Laboratory & Research WordPress Theme: Affected: <1.3.0Update to 1.3.0 or newer

Nazareth | Church & Religion WordPress Theme: Affected: ≤1.0.16No patch available

City Hostel | Travel & Hotel Booking WordPress Theme: Affected: ≤1.2.3No patch available

ProGuards | Safety & Security Site Template: Affected: <2.19.0Update to 2.19.0 or newer

Studeon | Education Center & Training Courses WordPress Theme: Affected: ≤1.1.15No patch available

Bonko | Safari & Zoo WordPress Theme: Affected: ≤1.0.14No patch available

Preston | Fruit Company & Organic Farming WordPress Theme: Affected: ≤1.1.9No patch available

Translang - Language Courses & Translation Services Elementor Template Kit: Affected: ≤1.1.16No patch available

ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL: Affected: ≤1.5.9No patch available

What to do until a fix ships
Severity
High8.1
CVSS
8.1
CVSS 3.1 · CNA (Wordfence)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What does this vector mean?
AV:N Attack vector
Network
AC:H Attack complexity
High
PR:N Privileges required
None
UI:N User interaction
None
S:U Scope
Unchanged
C:H Confidentiality
High
I:H Integrity
High
A:H Availability
High
Weakness
CWE-98 Local File Inclusion
Required access
No account needed
Exploit prediction (EPSS)
No score
CISA KEV
Not listed

Am I affected?

Gutentype | 100% Gutenberg Blog Theme + Elementor gutentype

  1. Affected≤ 2.1.11
  2. Patched in2.1.12

Update to 2.1.12 or newer.

You are affected if you run ≤ 2.1.11. Version 2.1.12 and later are not affected by this issue.

Abogado - Lawyer WordPress Theme abogado

  1. Affected< 1.18.0
  2. Patched in1.18.0

Update to 1.18.0 or newer.

You are affected if you run < 1.18.0. Version 1.18.0 and later are not affected by this issue.

Drone Media | Aerial Photography & Videography Theme drone-media

  1. Affected< 2.8.0
  2. Patched in2.8.0

Update to 2.8.0 or newer.

You are affected if you run < 2.8.0. Version 2.8.0 and later are not affected by this issue.

Camelia | Floral Studio Florist WordPress Theme camelia

  1. Affected≤ 1.2.14
  2. Patched in1.2.14.1

Update to 1.2.14.1 or newer.

You are affected if you run ≤ 1.2.14. Version 1.2.14.1 and later are not affected by this issue.

Agora — Event & Conference WordPress Theme agora

  1. Affected< 1.8.0
  2. Patched in1.8.0

Update to 1.8.0 or newer.

You are affected if you run < 1.8.0. Version 1.8.0 and later are not affected by this issue.

AI ANN - AI Generator & AI Agency WordPress Theme ann

  1. Affected< 1.33.0
  2. Patched in1.33.0

Update to 1.33.0 or newer.

You are affected if you run < 1.33.0. Version 1.33.0 and later are not affected by this issue.

Adrena | Airsoft Club & Paintball WordPress Theme adrena

  1. Affected≤ 1.2.13
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.13. No fixed version has been released.

Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme anesta

  1. Affected≤ 1.2.1
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.1. No fixed version has been released.

Travesia | Travel Agency and Tour Booking WordPress Theme travesia

  1. Affected≤ 1.1.15
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.15. No fixed version has been released.

Elementra - 100% Elementor WordPress Theme elementra

  1. Affected≤ 1.0.7
  2. Patched in1.0.8

Update to 1.0.8 or newer.

You are affected if you run ≤ 1.0.7. Version 1.0.8 and later are not affected by this issue.

Edema | Wellness & Spa WordPress Theme edema

  1. Affected< 1.2.2.1
  2. Patched in1.2.2.1

Update to 1.2.2.1 or newer.

You are affected if you run < 1.2.2.1. Version 1.2.2.1 and later are not affected by this issue.

Advice - Psychology, Therapy & Counseling Theme advice

  1. Affected< 1.17.0
  2. Patched in1.17.0

Update to 1.17.0 or newer.

You are affected if you run < 1.17.0. Version 1.17.0 and later are not affected by this issue.

Partiso | Political Party & Candidate Elementor Template Kit partiso

  1. Affected≤ 1.1.12
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.12. No fixed version has been released.

Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT qwery

  1. Affected< 3.6.0
  2. Patched in3.6.0

Update to 3.6.0 or newer.

You are affected if you run < 3.6.0. Version 3.6.0 and later are not affected by this issue.

Let's Play | Hockey School & Winter Sports WordPress Theme playhockey

  1. Affected≤ 1.1.14
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.14. No fixed version has been released.

Tantra | Yoga Studio and Fitness Club WordPress Theme tantra

  1. Affected< 2.9.0
  2. Patched in2.9.0

Update to 2.9.0 or newer.

You are affected if you run < 2.9.0. Version 2.9.0 and later are not affected by this issue.

Vagabonds - Travel Blog Elementor Template Kit vagabonds

  1. Affected≤ 1.3.10
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.3.10. No fixed version has been released.

Hogwords | School, University Education WordPress Theme hogwords

  1. Affected≤ 1.2.6
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.6. No fixed version has been released.

HotLock | Locksmith & Security Systems WordPress Theme + RTL hotlock

  1. Affected< 1.4.5
  2. Patched in1.4.5

Update to 1.4.5 or newer.

You are affected if you run < 1.4.5. Version 1.4.5 and later are not affected by this issue.

Wine House | Winery & Restaurant WordPress Theme wine-house

  1. Affected< 3.21.0
  2. Patched in3.21.0

Update to 3.21.0 or newer.

You are affected if you run < 3.21.0. Version 3.21.0 and later are not affected by this issue.

Smart Casa | Home Automation & House Technologies WordPress Theme smart-casa

  1. Affected≤ 1.0.11
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.11. No fixed version has been released.

Wise Move | Relocation and Storage Services WordPress Theme wisemove

  1. Affected≤ 1.1.15
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.15. No fixed version has been released.

MediaFlex - TV Channel & Streaming WordPress Theme mediaflex

  1. Affected< 1.10.0
  2. Patched in1.10.0

Update to 1.10.0 or newer.

You are affected if you run < 1.10.0. Version 1.10.0 and later are not affected by this issue.

Alhambra | Mosque & Islamic WordPress Theme + RTL alhambra

  1. Affected≤ 1.1.13
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.13. No fixed version has been released.

Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL booklovers

  1. Affected< 2.22.0
  2. Patched in2.22.0

Update to 2.22.0 or newer.

You are affected if you run < 2.22.0. Version 2.22.0 and later are not affected by this issue.

OldStory - Whisky Bar | Pub | Restaurant Site Template oldstory-whisky-bar

  1. Affected< 2.22.0
  2. Patched in2.22.0

Update to 2.22.0 or newer.

You are affected if you run < 2.22.0. Version 2.22.0 and later are not affected by this issue.

Birdily | Travel Agency & Tour Booking WordPress Theme birdily

  1. Affected≤ 1.2.3
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.3. No fixed version has been released.

ProRange | Painting & Renovation Theme prorange

  1. Affected< 2.12.0
  2. Patched in2.12.0

Update to 2.12.0 or newer.

You are affected if you run < 2.12.0. Version 2.12.0 and later are not affected by this issue.

Childy — Kids Store & Baby Clothing WordPress Theme childy

  1. Affected< 1.11.0
  2. Patched in1.11.0

Update to 1.11.0 or newer.

You are affected if you run < 1.11.0. Version 1.11.0 and later are not affected by this issue.

Def — CCTV & Bodyguard Security WordPress Theme def

  1. Affected< 1.8.0
  2. Patched in1.8.0

Update to 1.8.0 or newer.

You are affected if you run < 1.8.0. Version 1.8.0 and later are not affected by this issue.

Podium | Fashion Model Agency WordPress Theme podium

  1. Affected≤ 1.1.12
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.12. No fixed version has been released.

Belicia - Luxury Resort & Hotel Theme belicia

  1. Affected< 1.14.0
  2. Patched in1.14.0

Update to 1.14.0 or newer.

You are affected if you run < 1.14.0. Version 1.14.0 and later are not affected by this issue.

Chakra - Yoga Retreat & Leisure Center WordPress Theme chakra

  1. Affected< 1.19.0
  2. Patched in1.19.0

Update to 1.19.0 or newer.

You are affected if you run < 1.19.0. Version 1.19.0 and later are not affected by this issue.

Corredo | Motorcycle & Bike Race Sports WordPress Theme corredo

  1. Affected≤ 1.1.14
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.14. No fixed version has been released.

BeYoga | Yogastudio & Gym WordPress Theme beyoga

  1. Affected< 2.8.0
  2. Patched in2.8.0

Update to 2.8.0 or newer.

You are affected if you run < 2.8.0. Version 2.8.0 and later are not affected by this issue.

69 Clothing | Brand Store & Fashion Boutique WordPress Theme clothing69

  1. Affected≤ 1.2.11
  2. Patched in1.2.11.1

Update to 1.2.11.1 or newer.

You are affected if you run ≤ 1.2.11. Version 1.2.11.1 and later are not affected by this issue.

Alanzo | Chef & Event Catering WordPress Theme alanzo

  1. Affected≤ 1.2.3
  2. Patched in1.2.4

Update to 1.2.4 or newer.

You are affected if you run ≤ 1.2.3. Version 1.2.4 and later are not affected by this issue.

PathWell | Senior Care WordPress Theme pathwell

  1. Affected≤ 1.1.16
  2. Patched in1.1.17

Update to 1.1.17 or newer.

You are affected if you run ≤ 1.1.16. Version 1.1.17 and later are not affected by this issue.

Hampton | Home Design and Renovation WordPress Theme hampton

  1. Affected≤ 1.3.3
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.3.3. No fixed version has been released.

Carlax | Car Parts Store & Auto Service WordPress Theme carlax

  1. Affected≤ 1.1.1
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.1. No fixed version has been released.

Softic - SaaS Software & Application WordPress Theme softic

  1. Affected< 1.17.0
  2. Patched in1.17.0

Update to 1.17.0 or newer.

You are affected if you run < 1.17.0. Version 1.17.0 and later are not affected by this issue.

Juno | Kids Toys & Games Store WordPress Theme juno

  1. Affected< 2.27.0
  2. Patched in2.27.0

Update to 2.27.0 or newer.

You are affected if you run < 2.27.0. Version 2.27.0 and later are not affected by this issue.

Solio - Solar & Renewable Energy WordPress Theme solio

  1. Affected< 1.12.0
  2. Patched in1.12.0

Update to 1.12.0 or newer.

You are affected if you run < 1.12.0. Version 1.12.0 and later are not affected by this issue.

Heaven11 | Property & Apartment Real Estate WordPress Theme heaven11

  1. Affected≤ 1.0.9
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.9. No fixed version has been released.

Gravity | Interior Design & Furniture Store WordPress Theme gravity

  1. Affected≤ 1.3.0
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.3.0. No fixed version has been released.

Insurance Ancora - Finance WordPress Theme insurance-ancora

  1. Affected< 2.16.0
  2. Patched in2.16.0

Update to 2.16.0 or newer.

You are affected if you run < 2.16.0. Version 2.16.0 and later are not affected by this issue.

Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI chrimson

  1. Affected≤ 2.2
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 2.2. No fixed version has been released.

Hello Summer | Children Camp WordPress Theme hello-summer

  1. Affected≤ 1.1.3
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.3. No fixed version has been released.

ChainPress | Financial Business Blog PSD Template chainpress

  1. Affected≤ 1.0.14
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.14. No fixed version has been released.

Albertino - Laboratory WordPress Theme albertino

  1. Affected< 2.24.0.0
  2. Patched in2.24.0.0

Update to 2.24.0.0 or newer.

You are affected if you run < 2.24.0.0. Version 2.24.0.0 and later are not affected by this issue.

Planet Shakers | Church & Religion WordPress Theme planet-shakers

  1. Affected≤ 1.0.7
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.7. No fixed version has been released.

Samadhi | Oriental Buddhist Temple WordPress Theme samadhi

  1. Affected≤ 1.0.13
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.13. No fixed version has been released.

Callie Britt | Family Counselling Psychology WordPress Theme callie-britt

  1. Affected≤ 1.2.3
  2. Patched in1.2.3.1

Update to 1.2.3.1 or newer.

You are affected if you run ≤ 1.2.3. Version 1.2.3.1 and later are not affected by this issue.

Plastica - Plastic Surgery & Beauty WordPress Theme plastica

  1. Affected< 1.12.0
  2. Patched in1.12.0

Update to 1.12.0 or newer.

You are affected if you run < 1.12.0. Version 1.12.0 and later are not affected by this issue.

Credit Card Experience | Loan Company and Online Banking WordPress Theme credit-card

  1. Affected≤ 1.2.15
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.15. No fixed version has been released.

Laundry City | Dry Cleaning Services WordPress Theme laundrycity

  1. Affected≤ 1.2.17
  2. Patched in1.2.18

Update to 1.2.18 or newer.

You are affected if you run ≤ 1.2.17. Version 1.2.18 and later are not affected by this issue.

Tax Help - Finance & Accounting Adviser Theme tax-help

  1. Affected< 2.23.0
  2. Patched in2.23.0

Update to 2.23.0 or newer.

You are affected if you run < 2.23.0. Version 2.23.0 and later are not affected by this issue.

Chardonnay - Wine Store & Vineyard WordPress Theme chardonnay

  1. Affected< 1.26.0
  2. Patched in1.26.0

Update to 1.26.0 or newer.

You are affected if you run < 1.26.0. Version 1.26.0 and later are not affected by this issue.

Angela | Family Planning & Pregnancy Clinic WordPress Theme angela

  1. Affected≤ 1.4.3
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.4.3. No fixed version has been released.

Anubia | Smoking and Hookah Bar WordPress Theme anubia

  1. Affected≤ 1.0.14
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.14. No fixed version has been released.

Artesia - Freelancer WordPress Theme artesia

  1. Affected< 1.20.0
  2. Patched in1.20.0

Update to 1.20.0 or newer.

You are affected if you run < 1.20.0. Version 1.20.0 and later are not affected by this issue.

Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor accalia

  1. Affected≤ 1.5.3
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.5.3. No fixed version has been released.

Healthy Blog - Blog WordPress Theme + Store healthy-blog

  1. Affected≤ 1.2.8
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.8. No fixed version has been released.

Custom Made | Jewelry Manufacturer and Store WordPress Theme custom-made

  1. Affected≤ 1.1.17
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.17. No fixed version has been released.

Stratego - Corporate Business & Consulting WordPress Theme stratego

  1. Affected< 1.8.0
  2. Patched in1.8.0

Update to 1.8.0 or newer.

You are affected if you run < 1.8.0. Version 1.8.0 and later are not affected by this issue.

A.Williams | Assistant & Administrative Services WordPress Theme alisha-williams

  1. Affected≤ 1.3.0
  2. Patched in1.3.1

Update to 1.3.1 or newer.

You are affected if you run ≤ 1.3.0. Version 1.3.1 and later are not affected by this issue.

StevenWatkins - Personal Gym Trainer WordPress Theme stevenwatkins

  1. Affected< 2.12.0
  2. Patched in2.12.0

Update to 2.12.0 or newer.

You are affected if you run < 2.12.0. Version 2.12.0 and later are not affected by this issue.

Inset - Digital Agency & IT Services WordPress Theme inset

  1. Affected< 1.21.0
  2. Patched in1.21.0

Update to 1.21.0 or newer.

You are affected if you run < 1.21.0. Version 1.21.0 and later are not affected by this issue.

Crework | Coworking and Creative Space WordPress Theme crework

  1. Affected≤ 1.1.11
  2. Patched in1.1.12

Update to 1.1.12 or newer.

You are affected if you run ≤ 1.1.11. Version 1.1.12 and later are not affected by this issue.

Happy Rider - Horse School & Equestrian Center WordPress Theme happy-rider

  1. Affected< 2.18.0
  2. Patched in2.18.0

Update to 2.18.0 or newer.

You are affected if you run < 2.18.0. Version 2.18.0 and later are not affected by this issue.

Kargo | Logistics & Transportation PSD Template kargo

  1. Affected≤ 1.1.13
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.13. No fixed version has been released.

Carz — Car Dealer, Shop & Repair WordPress Theme carz

  1. Affected< 1.6.0
  2. Patched in1.6.0

Update to 1.6.0 or newer.

You are affected if you run < 1.6.0. Version 1.6.0 and later are not affected by this issue.

AlphaColor - Design & Printing Elementor Template Kit alpha-color

  1. Affected≤ 1.4.11.1
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.4.11.1. No fixed version has been released.

WotaHub | Coworking Space WordPress Theme wotahub

  1. Affected≤ 1.2.2
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.2. No fixed version has been released.

SoccerClub - Football Team & Soccer League WordPress Theme soccerclub

  1. Affected< 2.5.0
  2. Patched in2.5.0

Update to 2.5.0 or newer.

You are affected if you run < 2.5.0. Version 2.5.0 and later are not affected by this issue.

Asclepius - Doctor & Medical Theme asclepius

  1. Affected< 1.25.0
  2. Patched in1.25.0

Update to 1.25.0 or newer.

You are affected if you run < 1.25.0. Version 1.25.0 and later are not affected by this issue.

Fortunio - Carpenter, Forestry, Wood Manufacture Theme fortunio

  1. Affected< 2.12.0
  2. Patched in2.12.0

Update to 2.12.0 or newer.

You are affected if you run < 2.12.0. Version 2.12.0 and later are not affected by this issue.

Good Wine | Vineyard & Winery Shop WordPress Theme good-wine

  1. Affected≤ 1.1.10
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.10. No fixed version has been released.

Lab - Pharmacy, Laboratory & Research WordPress Theme lab

  1. Affected< 1.3.0
  2. Patched in1.3.0

Update to 1.3.0 or newer.

You are affected if you run < 1.3.0. Version 1.3.0 and later are not affected by this issue.

Nazareth | Church & Religion WordPress Theme nazareth

  1. Affected≤ 1.0.16
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.16. No fixed version has been released.

City Hostel | Travel & Hotel Booking WordPress Theme cityhostel

  1. Affected≤ 1.2.3
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.3. No fixed version has been released.

ProGuards | Safety & Security Site Template proguards

  1. Affected< 2.19.0
  2. Patched in2.19.0

Update to 2.19.0 or newer.

You are affected if you run < 2.19.0. Version 2.19.0 and later are not affected by this issue.

Studeon | Education Center & Training Courses WordPress Theme studeon

  1. Affected≤ 1.1.15
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.15. No fixed version has been released.

Bonko | Safari & Zoo WordPress Theme bonko

  1. Affected≤ 1.0.14
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.0.14. No fixed version has been released.

Preston | Fruit Company & Organic Farming WordPress Theme preston

  1. Affected≤ 1.1.9
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.9. No fixed version has been released.

Translang - Language Courses & Translation Services Elementor Template Kit translang

  1. Affected≤ 1.1.16
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.1.16. No fixed version has been released.

ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL prodent

  1. Affected≤ 1.5.9
  2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.5.9. No fixed version has been released.

  • Check your version: in wp-admin go to Plugins → Installed Plugins and read the version under Gutentype | 100% Gutenberg Blog Theme + Elementor.
  • No admin access? Run a passive check of your site. It reads public files only.
  • No account is needed to exploit this. Treat any exposed site on an affected version as at risk.

What to do

  1. Update to version 2.1.12, or a newer patched version
  2. Update to version 1.18.0, or a newer patched version
  3. Update to version 2.8.0, or a newer patched version
  4. Update to version 1.2.14.1, or a newer patched version
  5. Update to version 1.8.0, or a newer patched version
  6. Update to version 1.33.0, or a newer patched version
  7. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  8. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  9. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  10. Update to version 1.0.8, or a newer patched version
  11. Update to version 1.2.2.1, or a newer patched version
  12. Update to version 1.17.0, or a newer patched version
  13. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  14. Update to version 3.6.0, or a newer patched version
  15. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  16. Update to version 2.9.0, or a newer patched version
  17. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  18. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  19. Update to version 1.4.5, or a newer patched version
  20. Update to version 3.21.0, or a newer patched version
  21. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  22. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  23. Update to version 1.10.0, or a newer patched version
  24. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  25. Update to version 2.22.0, or a newer patched version
  26. Update to version 2.22.0, or a newer patched version
  27. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  28. Update to version 2.12.0, or a newer patched version
  29. Update to version 1.11.0, or a newer patched version
  30. Update to version 1.8.0, or a newer patched version
  31. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  32. Update to version 1.14.0, or a newer patched version
  33. Update to version 1.19.0, or a newer patched version
  34. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  35. Update to version 2.8.0, or a newer patched version
  36. Update to version 1.2.11.1, or a newer patched version
  37. Update to version 1.2.4, or a newer patched version
  38. Update to version 1.1.17, or a newer patched version
  39. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  40. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  41. Update to version 1.17.0, or a newer patched version
  42. Update to version 2.27.0, or a newer patched version
  43. Update to version 1.12.0, or a newer patched version
  44. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  45. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  46. Update to version 2.16.0, or a newer patched version
  47. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  48. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  49. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  50. Update to version 2.24.0.0, or a newer patched version
  51. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  52. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  53. Update to version 1.2.3.1, or a newer patched version
  54. Update to version 1.12.0, or a newer patched version
  55. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  56. Update to version 1.2.18, or a newer patched version
  57. Update to version 2.23.0, or a newer patched version
  58. Update to version 1.26.0, or a newer patched version
  59. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  60. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  61. Update to version 1.20.0, or a newer patched version
  62. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  63. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  64. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  65. Update to version 1.8.0, or a newer patched version
  66. Update to version 1.3.1, or a newer patched version
  67. Update to version 2.12.0, or a newer patched version
  68. Update to version 1.21.0, or a newer patched version
  69. Update to version 1.1.12, or a newer patched version
  70. Update to version 2.18.0, or a newer patched version
  71. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  72. Update to version 1.6.0, or a newer patched version
  73. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  74. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  75. Update to version 2.5.0, or a newer patched version
  76. Update to version 1.25.0, or a newer patched version
  77. Update to version 2.12.0, or a newer patched version
  78. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  79. Update to version 1.3.0, or a newer patched version
  80. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  81. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  82. Update to version 2.19.0, or a newer patched version
  83. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  84. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  85. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  86. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  87. No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
  88. Rotate administrator passwords and application secrets if the site ran a vulnerable version while publicly reachable.
  89. Watch Gutentype | 100% Gutenberg Blog Theme + Elementor to get an email when the next vulnerability is published.

Advisory

Source description from Wordfence Intelligence, credited to Bonds, Tran Nguyen Bao Khanh.

Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.

Exploits & references

Proof-of-concept & detection

No public proof-of-concept or detection template is known for this vulnerability.

Advisories & patches

More in Gutentype | 100% Gutenberg Blog Theme + Elementor

All 2
More vulnerabilities in Gutentype | 100% Gutenberg Blog Theme + Elementor
SeverityVulnerabilityCVEPublished
High8.1Unauthenticated PHP Object Injection
≤2.1.12No patch available
CVE-2026-62046

Same weakness (Local File Inclusion)

All Local File Inclusion
Other Local File Inclusion vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting via Comment User-Agent HeaderCVE-2026-120688
Critical9.8Unauthenticated Arbitrary File Upload via File Upload via Public Form SubmissionCVE-2026-125055
Critical9.8Unauthenticated PHP Object Injection to Remote Code Execution via 'form' ParameterCVE-2026-119077
Medium5.3Unauthenticated Sensitive Information Exposure in 'search' Parameter
Customer Reviews for WooCommerce≤5.127.0Update to 5.128.0
CVE-2026-121518

Timeline

  1. CVE published

    Severity high, CVSS 8.1

  2. Record last updated

Sources & licenses

Wordfence record
Vulnerability data
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Licensed under the CC BY-SA 4.0.
CVE® identifiers
Copyright 1999-2026 The MITRE Corporation. Used under the CVE Program. CVE® is a registered trademark of The MITRE Corporation.
CVSS / CWE
National Vulnerability Database (NVD), shown unmodified. This product uses the NVD API but is not endorsed or certified by the NVD.
VulnCrest content
Summary, remediation guidance and page layout © VulnCrest. Not sourced from NVD.

How we use these sources

Search VulnCrest Radar

Are you sure?