Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 — Unauthenticated Local File Inclusion
CVE-2025-26592Published · Updated Action summary
Gutentype | 100% Gutenberg Blog Theme + Elementor: Affected: ≤2.1.11Update to 2.1.12 or newer
Abogado - Lawyer WordPress Theme: Affected: <1.18.0Update to 1.18.0 or newer
Drone Media | Aerial Photography & Videography Theme: Affected: <2.8.0Update to 2.8.0 or newer
Camelia | Floral Studio Florist WordPress Theme: Affected: ≤1.2.14Update to 1.2.14.1 or newer
Agora — Event & Conference WordPress Theme: Affected: <1.8.0Update to 1.8.0 or newer
AI ANN - AI Generator & AI Agency WordPress Theme: Affected: <1.33.0Update to 1.33.0 or newer
Adrena | Airsoft Club & Paintball WordPress Theme: Affected: ≤1.2.13No patch available
Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme: Affected: ≤1.2.1No patch available
Travesia | Travel Agency and Tour Booking WordPress Theme: Affected: ≤1.1.15No patch available
Elementra - 100% Elementor WordPress Theme: Affected: ≤1.0.7Update to 1.0.8 or newer
Edema | Wellness & Spa WordPress Theme: Affected: <1.2.2.1Update to 1.2.2.1 or newer
Advice - Psychology, Therapy & Counseling Theme: Affected: <1.17.0Update to 1.17.0 or newer
Partiso | Political Party & Candidate Elementor Template Kit: Affected: ≤1.1.12No patch available
Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT: Affected: <3.6.0Update to 3.6.0 or newer
Let's Play | Hockey School & Winter Sports WordPress Theme: Affected: ≤1.1.14No patch available
Tantra | Yoga Studio and Fitness Club WordPress Theme: Affected: <2.9.0Update to 2.9.0 or newer
Vagabonds - Travel Blog Elementor Template Kit: Affected: ≤1.3.10No patch available
Hogwords | School, University Education WordPress Theme: Affected: ≤1.2.6No patch available
HotLock | Locksmith & Security Systems WordPress Theme + RTL: Affected: <1.4.5Update to 1.4.5 or newer
Wine House | Winery & Restaurant WordPress Theme: Affected: <3.21.0Update to 3.21.0 or newer
Smart Casa | Home Automation & House Technologies WordPress Theme: Affected: ≤1.0.11No patch available
Wise Move | Relocation and Storage Services WordPress Theme: Affected: ≤1.1.15No patch available
MediaFlex - TV Channel & Streaming WordPress Theme: Affected: <1.10.0Update to 1.10.0 or newer
Alhambra | Mosque & Islamic WordPress Theme + RTL: Affected: ≤1.1.13No patch available
Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL: Affected: <2.22.0Update to 2.22.0 or newer
OldStory - Whisky Bar | Pub | Restaurant Site Template: Affected: <2.22.0Update to 2.22.0 or newer
Birdily | Travel Agency & Tour Booking WordPress Theme: Affected: ≤1.2.3No patch available
ProRange | Painting & Renovation Theme: Affected: <2.12.0Update to 2.12.0 or newer
Childy — Kids Store & Baby Clothing WordPress Theme: Affected: <1.11.0Update to 1.11.0 or newer
Def — CCTV & Bodyguard Security WordPress Theme: Affected: <1.8.0Update to 1.8.0 or newer
Podium | Fashion Model Agency WordPress Theme: Affected: ≤1.1.12No patch available
Belicia - Luxury Resort & Hotel Theme: Affected: <1.14.0Update to 1.14.0 or newer
Chakra - Yoga Retreat & Leisure Center WordPress Theme: Affected: <1.19.0Update to 1.19.0 or newer
Corredo | Motorcycle & Bike Race Sports WordPress Theme: Affected: ≤1.1.14No patch available
BeYoga | Yogastudio & Gym WordPress Theme: Affected: <2.8.0Update to 2.8.0 or newer
69 Clothing | Brand Store & Fashion Boutique WordPress Theme: Affected: ≤1.2.11Update to 1.2.11.1 or newer
Alanzo | Chef & Event Catering WordPress Theme: Affected: ≤1.2.3Update to 1.2.4 or newer
PathWell | Senior Care WordPress Theme: Affected: ≤1.1.16Update to 1.1.17 or newer
Hampton | Home Design and Renovation WordPress Theme: Affected: ≤1.3.3No patch available
Carlax | Car Parts Store & Auto Service WordPress Theme: Affected: ≤1.1.1No patch available
Softic - SaaS Software & Application WordPress Theme: Affected: <1.17.0Update to 1.17.0 or newer
Juno | Kids Toys & Games Store WordPress Theme: Affected: <2.27.0Update to 2.27.0 or newer
Solio - Solar & Renewable Energy WordPress Theme: Affected: <1.12.0Update to 1.12.0 or newer
Heaven11 | Property & Apartment Real Estate WordPress Theme: Affected: ≤1.0.9No patch available
Gravity | Interior Design & Furniture Store WordPress Theme: Affected: ≤1.3.0No patch available
Insurance Ancora - Finance WordPress Theme: Affected: <2.16.0Update to 2.16.0 or newer
Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI: Affected: ≤2.2No patch available
Hello Summer | Children Camp WordPress Theme: Affected: ≤1.1.3No patch available
ChainPress | Financial Business Blog PSD Template: Affected: ≤1.0.14No patch available
Albertino - Laboratory WordPress Theme: Affected: <2.24.0.0Update to 2.24.0.0 or newer
Planet Shakers | Church & Religion WordPress Theme: Affected: ≤1.0.7No patch available
Samadhi | Oriental Buddhist Temple WordPress Theme: Affected: ≤1.0.13No patch available
Callie Britt | Family Counselling Psychology WordPress Theme: Affected: ≤1.2.3Update to 1.2.3.1 or newer
Plastica - Plastic Surgery & Beauty WordPress Theme: Affected: <1.12.0Update to 1.12.0 or newer
Credit Card Experience | Loan Company and Online Banking WordPress Theme: Affected: ≤1.2.15No patch available
Laundry City | Dry Cleaning Services WordPress Theme: Affected: ≤1.2.17Update to 1.2.18 or newer
Tax Help - Finance & Accounting Adviser Theme: Affected: <2.23.0Update to 2.23.0 or newer
Chardonnay - Wine Store & Vineyard WordPress Theme: Affected: <1.26.0Update to 1.26.0 or newer
Angela | Family Planning & Pregnancy Clinic WordPress Theme: Affected: ≤1.4.3No patch available
Anubia | Smoking and Hookah Bar WordPress Theme: Affected: ≤1.0.14No patch available
Artesia - Freelancer WordPress Theme: Affected: <1.20.0Update to 1.20.0 or newer
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor: Affected: ≤1.5.3No patch available
Healthy Blog - Blog WordPress Theme + Store: Affected: ≤1.2.8No patch available
Custom Made | Jewelry Manufacturer and Store WordPress Theme: Affected: ≤1.1.17No patch available
Stratego - Corporate Business & Consulting WordPress Theme: Affected: <1.8.0Update to 1.8.0 or newer
A.Williams | Assistant & Administrative Services WordPress Theme: Affected: ≤1.3.0Update to 1.3.1 or newer
StevenWatkins - Personal Gym Trainer WordPress Theme: Affected: <2.12.0Update to 2.12.0 or newer
Inset - Digital Agency & IT Services WordPress Theme: Affected: <1.21.0Update to 1.21.0 or newer
Crework | Coworking and Creative Space WordPress Theme: Affected: ≤1.1.11Update to 1.1.12 or newer
Happy Rider - Horse School & Equestrian Center WordPress Theme: Affected: <2.18.0Update to 2.18.0 or newer
Kargo | Logistics & Transportation PSD Template: Affected: ≤1.1.13No patch available
Carz — Car Dealer, Shop & Repair WordPress Theme: Affected: <1.6.0Update to 1.6.0 or newer
AlphaColor - Design & Printing Elementor Template Kit: Affected: ≤1.4.11.1No patch available
WotaHub | Coworking Space WordPress Theme: Affected: ≤1.2.2No patch available
SoccerClub - Football Team & Soccer League WordPress Theme: Affected: <2.5.0Update to 2.5.0 or newer
Asclepius - Doctor & Medical Theme: Affected: <1.25.0Update to 1.25.0 or newer
Fortunio - Carpenter, Forestry, Wood Manufacture Theme: Affected: <2.12.0Update to 2.12.0 or newer
Good Wine | Vineyard & Winery Shop WordPress Theme: Affected: ≤1.1.10No patch available
Lab - Pharmacy, Laboratory & Research WordPress Theme: Affected: <1.3.0Update to 1.3.0 or newer
Nazareth | Church & Religion WordPress Theme: Affected: ≤1.0.16No patch available
City Hostel | Travel & Hotel Booking WordPress Theme: Affected: ≤1.2.3No patch available
ProGuards | Safety & Security Site Template: Affected: <2.19.0Update to 2.19.0 or newer
Studeon | Education Center & Training Courses WordPress Theme: Affected: ≤1.1.15No patch available
Bonko | Safari & Zoo WordPress Theme: Affected: ≤1.0.14No patch available
Preston | Fruit Company & Organic Farming WordPress Theme: Affected: ≤1.1.9No patch available
Translang - Language Courses & Translation Services Elementor Template Kit: Affected: ≤1.1.16No patch available
ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL: Affected: ≤1.5.9No patch available
What to do until a fix ships- Severity
- High8.1
- CVSS
- 8.1CVSS 3.1 · CNA (Wordfence)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HWhat does this vector mean?
AV:NAttack vector- Network
AC:HAttack complexity- High
PR:NPrivileges required- None
UI:NUser interaction- None
S:UScope- Unchanged
C:HConfidentiality- High
I:HIntegrity- High
A:HAvailability- High
- Weakness
- CWE-98 Local File Inclusion
- Required access
- No account needed
- Exploit prediction (EPSS)
- No score
- CISA KEV
- Not listed
On this page8
Am I affected?
Gutentype | 100% Gutenberg Blog Theme + Elementor gutentype
- Affected≤ 2.1.11
- Patched in2.1.12
Update to 2.1.12 or newer.
You are affected if you run ≤ 2.1.11. Version 2.1.12 and later are not affected by this issue.
Abogado - Lawyer WordPress Theme abogado
- Affected< 1.18.0
- Patched in1.18.0
Update to 1.18.0 or newer.
You are affected if you run < 1.18.0. Version 1.18.0 and later are not affected by this issue.
Drone Media | Aerial Photography & Videography Theme drone-media
- Affected< 2.8.0
- Patched in2.8.0
Update to 2.8.0 or newer.
You are affected if you run < 2.8.0. Version 2.8.0 and later are not affected by this issue.
Camelia | Floral Studio Florist WordPress Theme camelia
- Affected≤ 1.2.14
- Patched in1.2.14.1
Update to 1.2.14.1 or newer.
You are affected if you run ≤ 1.2.14. Version 1.2.14.1 and later are not affected by this issue.
Agora — Event & Conference WordPress Theme agora
- Affected< 1.8.0
- Patched in1.8.0
Update to 1.8.0 or newer.
You are affected if you run < 1.8.0. Version 1.8.0 and later are not affected by this issue.
AI ANN - AI Generator & AI Agency WordPress Theme ann
- Affected< 1.33.0
- Patched in1.33.0
Update to 1.33.0 or newer.
You are affected if you run < 1.33.0. Version 1.33.0 and later are not affected by this issue.
Adrena | Airsoft Club & Paintball WordPress Theme adrena
- Affected≤ 1.2.13
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.13. No fixed version has been released.
Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme anesta
- Affected≤ 1.2.1
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.1. No fixed version has been released.
Travesia | Travel Agency and Tour Booking WordPress Theme travesia
- Affected≤ 1.1.15
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.15. No fixed version has been released.
Elementra - 100% Elementor WordPress Theme elementra
- Affected≤ 1.0.7
- Patched in1.0.8
Update to 1.0.8 or newer.
You are affected if you run ≤ 1.0.7. Version 1.0.8 and later are not affected by this issue.
Edema | Wellness & Spa WordPress Theme edema
- Affected< 1.2.2.1
- Patched in1.2.2.1
Update to 1.2.2.1 or newer.
You are affected if you run < 1.2.2.1. Version 1.2.2.1 and later are not affected by this issue.
Advice - Psychology, Therapy & Counseling Theme advice
- Affected< 1.17.0
- Patched in1.17.0
Update to 1.17.0 or newer.
You are affected if you run < 1.17.0. Version 1.17.0 and later are not affected by this issue.
Partiso | Political Party & Candidate Elementor Template Kit partiso
- Affected≤ 1.1.12
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.12. No fixed version has been released.
Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT qwery
- Affected< 3.6.0
- Patched in3.6.0
Update to 3.6.0 or newer.
You are affected if you run < 3.6.0. Version 3.6.0 and later are not affected by this issue.
Let's Play | Hockey School & Winter Sports WordPress Theme playhockey
- Affected≤ 1.1.14
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.14. No fixed version has been released.
Tantra | Yoga Studio and Fitness Club WordPress Theme tantra
- Affected< 2.9.0
- Patched in2.9.0
Update to 2.9.0 or newer.
You are affected if you run < 2.9.0. Version 2.9.0 and later are not affected by this issue.
Vagabonds - Travel Blog Elementor Template Kit vagabonds
- Affected≤ 1.3.10
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.3.10. No fixed version has been released.
Hogwords | School, University Education WordPress Theme hogwords
- Affected≤ 1.2.6
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.6. No fixed version has been released.
HotLock | Locksmith & Security Systems WordPress Theme + RTL hotlock
- Affected< 1.4.5
- Patched in1.4.5
Update to 1.4.5 or newer.
You are affected if you run < 1.4.5. Version 1.4.5 and later are not affected by this issue.
Wine House | Winery & Restaurant WordPress Theme wine-house
- Affected< 3.21.0
- Patched in3.21.0
Update to 3.21.0 or newer.
You are affected if you run < 3.21.0. Version 3.21.0 and later are not affected by this issue.
Smart Casa | Home Automation & House Technologies WordPress Theme smart-casa
- Affected≤ 1.0.11
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.11. No fixed version has been released.
Wise Move | Relocation and Storage Services WordPress Theme wisemove
- Affected≤ 1.1.15
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.15. No fixed version has been released.
MediaFlex - TV Channel & Streaming WordPress Theme mediaflex
- Affected< 1.10.0
- Patched in1.10.0
Update to 1.10.0 or newer.
You are affected if you run < 1.10.0. Version 1.10.0 and later are not affected by this issue.
Alhambra | Mosque & Islamic WordPress Theme + RTL alhambra
- Affected≤ 1.1.13
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.13. No fixed version has been released.
Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL booklovers
- Affected< 2.22.0
- Patched in2.22.0
Update to 2.22.0 or newer.
You are affected if you run < 2.22.0. Version 2.22.0 and later are not affected by this issue.
OldStory - Whisky Bar | Pub | Restaurant Site Template oldstory-whisky-bar
- Affected< 2.22.0
- Patched in2.22.0
Update to 2.22.0 or newer.
You are affected if you run < 2.22.0. Version 2.22.0 and later are not affected by this issue.
Birdily | Travel Agency & Tour Booking WordPress Theme birdily
- Affected≤ 1.2.3
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.3. No fixed version has been released.
ProRange | Painting & Renovation Theme prorange
- Affected< 2.12.0
- Patched in2.12.0
Update to 2.12.0 or newer.
You are affected if you run < 2.12.0. Version 2.12.0 and later are not affected by this issue.
Childy — Kids Store & Baby Clothing WordPress Theme childy
- Affected< 1.11.0
- Patched in1.11.0
Update to 1.11.0 or newer.
You are affected if you run < 1.11.0. Version 1.11.0 and later are not affected by this issue.
Def — CCTV & Bodyguard Security WordPress Theme def
- Affected< 1.8.0
- Patched in1.8.0
Update to 1.8.0 or newer.
You are affected if you run < 1.8.0. Version 1.8.0 and later are not affected by this issue.
Podium | Fashion Model Agency WordPress Theme podium
- Affected≤ 1.1.12
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.12. No fixed version has been released.
Belicia - Luxury Resort & Hotel Theme belicia
- Affected< 1.14.0
- Patched in1.14.0
Update to 1.14.0 or newer.
You are affected if you run < 1.14.0. Version 1.14.0 and later are not affected by this issue.
Chakra - Yoga Retreat & Leisure Center WordPress Theme chakra
- Affected< 1.19.0
- Patched in1.19.0
Update to 1.19.0 or newer.
You are affected if you run < 1.19.0. Version 1.19.0 and later are not affected by this issue.
Corredo | Motorcycle & Bike Race Sports WordPress Theme corredo
- Affected≤ 1.1.14
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.14. No fixed version has been released.
BeYoga | Yogastudio & Gym WordPress Theme beyoga
- Affected< 2.8.0
- Patched in2.8.0
Update to 2.8.0 or newer.
You are affected if you run < 2.8.0. Version 2.8.0 and later are not affected by this issue.
69 Clothing | Brand Store & Fashion Boutique WordPress Theme clothing69
- Affected≤ 1.2.11
- Patched in1.2.11.1
Update to 1.2.11.1 or newer.
You are affected if you run ≤ 1.2.11. Version 1.2.11.1 and later are not affected by this issue.
Alanzo | Chef & Event Catering WordPress Theme alanzo
- Affected≤ 1.2.3
- Patched in1.2.4
Update to 1.2.4 or newer.
You are affected if you run ≤ 1.2.3. Version 1.2.4 and later are not affected by this issue.
PathWell | Senior Care WordPress Theme pathwell
- Affected≤ 1.1.16
- Patched in1.1.17
Update to 1.1.17 or newer.
You are affected if you run ≤ 1.1.16. Version 1.1.17 and later are not affected by this issue.
Hampton | Home Design and Renovation WordPress Theme hampton
- Affected≤ 1.3.3
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.3.3. No fixed version has been released.
Carlax | Car Parts Store & Auto Service WordPress Theme carlax
- Affected≤ 1.1.1
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.1. No fixed version has been released.
Softic - SaaS Software & Application WordPress Theme softic
- Affected< 1.17.0
- Patched in1.17.0
Update to 1.17.0 or newer.
You are affected if you run < 1.17.0. Version 1.17.0 and later are not affected by this issue.
Juno | Kids Toys & Games Store WordPress Theme juno
- Affected< 2.27.0
- Patched in2.27.0
Update to 2.27.0 or newer.
You are affected if you run < 2.27.0. Version 2.27.0 and later are not affected by this issue.
Solio - Solar & Renewable Energy WordPress Theme solio
- Affected< 1.12.0
- Patched in1.12.0
Update to 1.12.0 or newer.
You are affected if you run < 1.12.0. Version 1.12.0 and later are not affected by this issue.
Heaven11 | Property & Apartment Real Estate WordPress Theme heaven11
- Affected≤ 1.0.9
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.9. No fixed version has been released.
Gravity | Interior Design & Furniture Store WordPress Theme gravity
- Affected≤ 1.3.0
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.3.0. No fixed version has been released.
Insurance Ancora - Finance WordPress Theme insurance-ancora
- Affected< 2.16.0
- Patched in2.16.0
Update to 2.16.0 or newer.
You are affected if you run < 2.16.0. Version 2.16.0 and later are not affected by this issue.
Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI chrimson
- Affected≤ 2.2
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 2.2. No fixed version has been released.
Hello Summer | Children Camp WordPress Theme hello-summer
- Affected≤ 1.1.3
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.3. No fixed version has been released.
ChainPress | Financial Business Blog PSD Template chainpress
- Affected≤ 1.0.14
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.14. No fixed version has been released.
Albertino - Laboratory WordPress Theme albertino
- Affected< 2.24.0.0
- Patched in2.24.0.0
Update to 2.24.0.0 or newer.
You are affected if you run < 2.24.0.0. Version 2.24.0.0 and later are not affected by this issue.
Planet Shakers | Church & Religion WordPress Theme planet-shakers
- Affected≤ 1.0.7
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.7. No fixed version has been released.
Samadhi | Oriental Buddhist Temple WordPress Theme samadhi
- Affected≤ 1.0.13
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.13. No fixed version has been released.
Callie Britt | Family Counselling Psychology WordPress Theme callie-britt
- Affected≤ 1.2.3
- Patched in1.2.3.1
Update to 1.2.3.1 or newer.
You are affected if you run ≤ 1.2.3. Version 1.2.3.1 and later are not affected by this issue.
Plastica - Plastic Surgery & Beauty WordPress Theme plastica
- Affected< 1.12.0
- Patched in1.12.0
Update to 1.12.0 or newer.
You are affected if you run < 1.12.0. Version 1.12.0 and later are not affected by this issue.
Credit Card Experience | Loan Company and Online Banking WordPress Theme credit-card
- Affected≤ 1.2.15
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.15. No fixed version has been released.
Laundry City | Dry Cleaning Services WordPress Theme laundrycity
- Affected≤ 1.2.17
- Patched in1.2.18
Update to 1.2.18 or newer.
You are affected if you run ≤ 1.2.17. Version 1.2.18 and later are not affected by this issue.
Tax Help - Finance & Accounting Adviser Theme tax-help
- Affected< 2.23.0
- Patched in2.23.0
Update to 2.23.0 or newer.
You are affected if you run < 2.23.0. Version 2.23.0 and later are not affected by this issue.
Chardonnay - Wine Store & Vineyard WordPress Theme chardonnay
- Affected< 1.26.0
- Patched in1.26.0
Update to 1.26.0 or newer.
You are affected if you run < 1.26.0. Version 1.26.0 and later are not affected by this issue.
Angela | Family Planning & Pregnancy Clinic WordPress Theme angela
- Affected≤ 1.4.3
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.4.3. No fixed version has been released.
Anubia | Smoking and Hookah Bar WordPress Theme anubia
- Affected≤ 1.0.14
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.14. No fixed version has been released.
Artesia - Freelancer WordPress Theme artesia
- Affected< 1.20.0
- Patched in1.20.0
Update to 1.20.0 or newer.
You are affected if you run < 1.20.0. Version 1.20.0 and later are not affected by this issue.
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor accalia
- Affected≤ 1.5.3
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.5.3. No fixed version has been released.
Healthy Blog - Blog WordPress Theme + Store healthy-blog
- Affected≤ 1.2.8
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.8. No fixed version has been released.
Custom Made | Jewelry Manufacturer and Store WordPress Theme custom-made
- Affected≤ 1.1.17
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.17. No fixed version has been released.
Stratego - Corporate Business & Consulting WordPress Theme stratego
- Affected< 1.8.0
- Patched in1.8.0
Update to 1.8.0 or newer.
You are affected if you run < 1.8.0. Version 1.8.0 and later are not affected by this issue.
A.Williams | Assistant & Administrative Services WordPress Theme alisha-williams
- Affected≤ 1.3.0
- Patched in1.3.1
Update to 1.3.1 or newer.
You are affected if you run ≤ 1.3.0. Version 1.3.1 and later are not affected by this issue.
StevenWatkins - Personal Gym Trainer WordPress Theme stevenwatkins
- Affected< 2.12.0
- Patched in2.12.0
Update to 2.12.0 or newer.
You are affected if you run < 2.12.0. Version 2.12.0 and later are not affected by this issue.
Inset - Digital Agency & IT Services WordPress Theme inset
- Affected< 1.21.0
- Patched in1.21.0
Update to 1.21.0 or newer.
You are affected if you run < 1.21.0. Version 1.21.0 and later are not affected by this issue.
Crework | Coworking and Creative Space WordPress Theme crework
- Affected≤ 1.1.11
- Patched in1.1.12
Update to 1.1.12 or newer.
You are affected if you run ≤ 1.1.11. Version 1.1.12 and later are not affected by this issue.
Happy Rider - Horse School & Equestrian Center WordPress Theme happy-rider
- Affected< 2.18.0
- Patched in2.18.0
Update to 2.18.0 or newer.
You are affected if you run < 2.18.0. Version 2.18.0 and later are not affected by this issue.
Kargo | Logistics & Transportation PSD Template kargo
- Affected≤ 1.1.13
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.13. No fixed version has been released.
Carz — Car Dealer, Shop & Repair WordPress Theme carz
- Affected< 1.6.0
- Patched in1.6.0
Update to 1.6.0 or newer.
You are affected if you run < 1.6.0. Version 1.6.0 and later are not affected by this issue.
AlphaColor - Design & Printing Elementor Template Kit alpha-color
- Affected≤ 1.4.11.1
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.4.11.1. No fixed version has been released.
WotaHub | Coworking Space WordPress Theme wotahub
- Affected≤ 1.2.2
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.2. No fixed version has been released.
SoccerClub - Football Team & Soccer League WordPress Theme soccerclub
- Affected< 2.5.0
- Patched in2.5.0
Update to 2.5.0 or newer.
You are affected if you run < 2.5.0. Version 2.5.0 and later are not affected by this issue.
Asclepius - Doctor & Medical Theme asclepius
- Affected< 1.25.0
- Patched in1.25.0
Update to 1.25.0 or newer.
You are affected if you run < 1.25.0. Version 1.25.0 and later are not affected by this issue.
Fortunio - Carpenter, Forestry, Wood Manufacture Theme fortunio
- Affected< 2.12.0
- Patched in2.12.0
Update to 2.12.0 or newer.
You are affected if you run < 2.12.0. Version 2.12.0 and later are not affected by this issue.
Good Wine | Vineyard & Winery Shop WordPress Theme good-wine
- Affected≤ 1.1.10
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.10. No fixed version has been released.
Lab - Pharmacy, Laboratory & Research WordPress Theme lab
- Affected< 1.3.0
- Patched in1.3.0
Update to 1.3.0 or newer.
You are affected if you run < 1.3.0. Version 1.3.0 and later are not affected by this issue.
Nazareth | Church & Religion WordPress Theme nazareth
- Affected≤ 1.0.16
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.16. No fixed version has been released.
City Hostel | Travel & Hotel Booking WordPress Theme cityhostel
- Affected≤ 1.2.3
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.2.3. No fixed version has been released.
ProGuards | Safety & Security Site Template proguards
- Affected< 2.19.0
- Patched in2.19.0
Update to 2.19.0 or newer.
You are affected if you run < 2.19.0. Version 2.19.0 and later are not affected by this issue.
Studeon | Education Center & Training Courses WordPress Theme studeon
- Affected≤ 1.1.15
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.15. No fixed version has been released.
Bonko | Safari & Zoo WordPress Theme bonko
- Affected≤ 1.0.14
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.0.14. No fixed version has been released.
Preston | Fruit Company & Organic Farming WordPress Theme preston
- Affected≤ 1.1.9
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.9. No fixed version has been released.
Translang - Language Courses & Translation Services Elementor Template Kit translang
- Affected≤ 1.1.16
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.1.16. No fixed version has been released.
ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL prodent
- Affected≤ 1.5.9
- PatchedNo fix yet
No patched version available.
You are affected if you run ≤ 1.5.9. No fixed version has been released.
- Check your version: in wp-admin go to Plugins → Installed Plugins and read the version under Gutentype | 100% Gutenberg Blog Theme + Elementor.
- No admin access? Run a passive check of your site. It reads public files only.
- No account is needed to exploit this. Treat any exposed site on an affected version as at risk.
What to do
- Update to version 2.1.12, or a newer patched version
- Update to version 1.18.0, or a newer patched version
- Update to version 2.8.0, or a newer patched version
- Update to version 1.2.14.1, or a newer patched version
- Update to version 1.8.0, or a newer patched version
- Update to version 1.33.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.0.8, or a newer patched version
- Update to version 1.2.2.1, or a newer patched version
- Update to version 1.17.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 3.6.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.9.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.4.5, or a newer patched version
- Update to version 3.21.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.10.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.22.0, or a newer patched version
- Update to version 2.22.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.12.0, or a newer patched version
- Update to version 1.11.0, or a newer patched version
- Update to version 1.8.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.14.0, or a newer patched version
- Update to version 1.19.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.8.0, or a newer patched version
- Update to version 1.2.11.1, or a newer patched version
- Update to version 1.2.4, or a newer patched version
- Update to version 1.1.17, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.17.0, or a newer patched version
- Update to version 2.27.0, or a newer patched version
- Update to version 1.12.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.16.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.24.0.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.2.3.1, or a newer patched version
- Update to version 1.12.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.2.18, or a newer patched version
- Update to version 2.23.0, or a newer patched version
- Update to version 1.26.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.20.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.8.0, or a newer patched version
- Update to version 1.3.1, or a newer patched version
- Update to version 2.12.0, or a newer patched version
- Update to version 1.21.0, or a newer patched version
- Update to version 1.1.12, or a newer patched version
- Update to version 2.18.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.6.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.5.0, or a newer patched version
- Update to version 1.25.0, or a newer patched version
- Update to version 2.12.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 1.3.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Update to version 2.19.0, or a newer patched version
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
- Rotate administrator passwords and application secrets if the site ran a vulnerable version while publicly reachable.
- Watch Gutentype | 100% Gutenberg Blog Theme + Elementor to get an email when the next vulnerability is published.
Advisory
Source description from Wordfence Intelligence, credited to Bonds, Tran Nguyen Bao Khanh.
Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
Exploits & references
Proof-of-concept & detection
No public proof-of-concept or detection template is known for this vulnerability.
Advisories & patches
- Advisorywordfence.com
Related CVEs
More in Gutentype | 100% Gutenberg Blog Theme + Elementor
All 2| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated PHP Object Injection ≤2.1.12No patch available | CVE-2026-62046 |
- High8.1Unauthenticated PHP Object Injection
≤2.1.12No patch available
Same weakness (Local File Inclusion)
All Local File Inclusion| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via Comment User-Agent Header | CVE-2026-120688 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload via File Upload via Public Form Submission | CVE-2026-125055 | |
| Critical9.8 | Unauthenticated PHP Object Injection to Remote Code Execution via 'form' Parameter | CVE-2026-119077 | |
| Medium5.3 | Unauthenticated Sensitive Information Exposure in 'search' Parameter | CVE-2026-121518 |
- High7.2Unauthenticated Stored Cross-Site Scripting via Comment User-Agent Header
EZ SQL Reports Shortcode Widget and DB Backup
≤5.25.25Update to 5.26.45
- Critical9.8Unauthenticated Arbitrary File Upload via File Upload via Public Form Submission
Chatterbug Forms – Fast, Flexible WordPress Form Builder
≤1.0.2Update to 1.1
- Critical9.8Unauthenticated PHP Object Injection to Remote Code Execution via 'form' Parameter
ELEX WordPress HelpDesk & Customer Ticketing System
≤3.3.9Update to 3.4.0
- Medium5.3Unauthenticated Sensitive Information Exposure in 'search' Parameter
Customer Reviews for WooCommerce
≤5.127.0Update to 5.128.0
Timeline
CVE published
Severity high, CVSS 8.1
Record last updated
Sources & licenses
Wordfence record- Vulnerability data
- Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Licensed under the CC BY-SA 4.0.
- CVE® identifiers
- Copyright 1999-2026 The MITRE Corporation. Used under the CVE Program. CVE® is a registered trademark of The MITRE Corporation.
- CVSS / CWE
- National Vulnerability Database (NVD), shown unmodified. This product uses the NVD API but is not endorsed or certified by the NVD.
- VulnCrest content
- Summary, remediation guidance and page layout © VulnCrest. Not sourced from NVD.
