Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
Wise Move | Relocation and Storage Services WordPress Theme
Affected versions: *-1.1.15
Patched versions: Not supplied
MediaFlex - TV Channel & Streaming WordPress Theme
Affected versions: [*, 1.10.0)
Patched versions: 1.10.0
Alhambra | Mosque & Islamic WordPress Theme + RTL
Affected versions: *-1.1.13
Patched versions: Not supplied
Booklovers - Publishing House, Bookshop & BookStore WordPress Theme + RTL
Affected versions: [*, 2.22.0)
Patched versions: 2.22.0
AI ANN - AI Generator & AI Agency WordPress Theme
Affected versions: [*, 1.33.0)
Patched versions: 1.33.0
OldStory - Whisky Bar | Pub | Restaurant Site Template
Affected versions: [*, 2.22.0)
Patched versions: 2.22.0
Let's Play | Hockey School & Winter Sports WordPress Theme
Affected versions: *-1.1.14
Patched versions: Not supplied
Birdily | Travel Agency & Tour Booking WordPress Theme
Affected versions: *-1.2.3
Patched versions: Not supplied
ProRange | Painting & Renovation Theme
Affected versions: [*, 2.12.0)
Patched versions: 2.12.0
Childy — Kids Store & Baby Clothing WordPress Theme
Affected versions: [*, 1.11.0)
Patched versions: 1.11.0
Def — CCTV & Bodyguard Security WordPress Theme
Affected versions: [*, 1.8.0)
Patched versions: 1.8.0
Podium | Fashion Model Agency WordPress Theme
Affected versions: *-1.1.12
Patched versions: Not supplied
Anesta - Intranet, Extranet, Community and BuddyPress WordPress Theme
Affected versions: *-1.2.1
Patched versions: Not supplied
Belicia - Luxury Resort & Hotel Theme
Affected versions: [*, 1.14.0)
Patched versions: 1.14.0
Chakra - Yoga Retreat & Leisure Center WordPress Theme
Affected versions: [*, 1.19.0)
Patched versions: 1.19.0
Corredo | Motorcycle & Bike Race Sports WordPress Theme
Affected versions: *-1.1.14
Patched versions: Not supplied
BeYoga | Yogastudio & Gym WordPress Theme
Affected versions: [*, 2.8.0)
Patched versions: 2.8.0
Hogwords | School, University Education WordPress Theme
Affected versions: *-1.2.6
Patched versions: Not supplied
69 Clothing | Brand Store & Fashion Boutique WordPress Theme
Affected versions: *-1.2.11
Patched versions: 1.2.11.1
Alanzo | Chef & Event Catering WordPress Theme
Affected versions: *-1.2.3
Patched versions: 1.2.4
PathWell | Senior Care WordPress Theme
Affected versions: *-1.1.16
Patched versions: 1.1.17
Hampton | Home Design and Renovation WordPress Theme
Affected versions: *-1.3.3
Patched versions: Not supplied
Carlax | Car Parts Store & Auto Service WordPress Theme
Affected versions: *-1.1.1
Patched versions: Not supplied
HotLock | Locksmith & Security Systems WordPress Theme + RTL
Affected versions: [*, 1.4.5)
Patched versions: 1.4.5
Elementra - 100% Elementor WordPress Theme
Affected versions: *-1.0.7
Patched versions: 1.0.8
Softic - SaaS Software & Application WordPress Theme
Affected versions: [*, 1.17.0)
Patched versions: 1.17.0
Juno | Kids Toys & Games Store WordPress Theme
Affected versions: [*, 2.27.0)
Patched versions: 2.27.0
Solio - Solar & Renewable Energy WordPress Theme
Affected versions: [*, 1.12.0)
Patched versions: 1.12.0
Heaven11 | Property & Apartment Real Estate WordPress Theme
Affected versions: *-1.0.9
Patched versions: Not supplied
Gravity | Interior Design & Furniture Store WordPress Theme
Affected versions: *-1.3.0
Patched versions: Not supplied
Agora — Event & Conference WordPress Theme
Affected versions: [*, 1.8.0)
Patched versions: 1.8.0
Insurance Ancora - Finance WordPress Theme
Affected versions: [*, 2.16.0)
Patched versions: 2.16.0
Chrimson | Windows & Doors Installation Services Store WordPress Theme + AI
Affected versions: *-2.2
Patched versions: Not supplied
Hello Summer | Children Camp WordPress Theme
Affected versions: *-1.1.3
Patched versions: Not supplied
Gutentype | 100% Gutenberg Blog Theme + Elementor
Affected versions: *-2.1.11
Patched versions: 2.1.12
ChainPress | Financial Business Blog PSD Template
Affected versions: *-1.0.14
Patched versions: Not supplied
Albertino - Laboratory WordPress Theme
Affected versions: [*, 2.24.0.0)
Patched versions: 2.24.0.0
Planet Shakers | Church & Religion WordPress Theme
Affected versions: *-1.0.7
Patched versions: Not supplied
Samadhi | Oriental Buddhist Temple WordPress Theme
Affected versions: *-1.0.13
Patched versions: Not supplied
Callie Britt | Family Counselling Psychology WordPress Theme
Affected versions: *-1.2.3
Patched versions: 1.2.3.1
Vagabonds - Travel Blog Elementor Template Kit
Affected versions: *-1.3.10
Patched versions: Not supplied
Plastica - Plastic Surgery & Beauty WordPress Theme
Affected versions: [*, 1.12.0)
Patched versions: 1.12.0
Credit Card Experience | Loan Company and Online Banking WordPress Theme
Affected versions: *-1.2.15
Patched versions: Not supplied
Laundry City | Dry Cleaning Services WordPress Theme
Affected versions: *-1.2.17
Patched versions: 1.2.18
Smart Casa | Home Automation & House Technologies WordPress Theme
Affected versions: *-1.0.11
Patched versions: Not supplied
Tax Help - Finance & Accounting Adviser Theme
Affected versions: [*, 2.23.0)
Patched versions: 2.23.0
Chardonnay - Wine Store & Vineyard WordPress Theme
Affected versions: [*, 1.26.0)
Patched versions: 1.26.0
Angela | Family Planning & Pregnancy Clinic WordPress Theme
Affected versions: *-1.4.3
Patched versions: Not supplied
Advice - Psychology, Therapy & Counseling Theme
Affected versions: [*, 1.17.0)
Patched versions: 1.17.0
Anubia | Smoking and Hookah Bar WordPress Theme
Affected versions: *-1.0.14
Patched versions: Not supplied
Abogado - Lawyer WordPress Theme
Affected versions: [*, 1.18.0)
Patched versions: 1.18.0
Artesia - Freelancer WordPress Theme
Affected versions: [*, 1.20.0)
Patched versions: 1.20.0
Edema | Wellness & Spa WordPress Theme
Affected versions: [*, 1.2.2.1)
Patched versions: 1.2.2.1
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor
Affected versions: *-1.5.3
Patched versions: Not supplied
Healthy Blog - Blog WordPress Theme + Store
Affected versions: *-1.2.8
Patched versions: Not supplied
Custom Made | Jewelry Manufacturer and Store WordPress Theme
Affected versions: *-1.1.17
Patched versions: Not supplied
Partiso | Political Party & Candidate Elementor Template Kit
Affected versions: *-1.1.12
Patched versions: Not supplied
Camelia | Floral Studio Florist WordPress Theme
Affected versions: *-1.2.14
Patched versions: 1.2.14.1
Stratego - Corporate Business & Consulting WordPress Theme
Affected versions: [*, 1.8.0)
Patched versions: 1.8.0
A.Williams | Assistant & Administrative Services WordPress Theme
Affected versions: *-1.3.0
Patched versions: 1.3.1
StevenWatkins - Personal Gym Trainer WordPress Theme
Affected versions: [*, 2.12.0)
Patched versions: 2.12.0
Inset - Digital Agency & IT Services WordPress Theme
Affected versions: [*, 1.21.0)
Patched versions: 1.21.0
Crework | Coworking and Creative Space WordPress Theme
Affected versions: *-1.1.11
Patched versions: 1.1.12
Wine House | Winery & Restaurant WordPress Theme
Affected versions: [*, 3.21.0)
Patched versions: 3.21.0
Happy Rider - Horse School & Equestrian Center WordPress Theme
Affected versions: [*, 2.18.0)
Patched versions: 2.18.0
Kargo | Logistics & Transportation PSD Template
Affected versions: *-1.1.13
Patched versions: Not supplied
Drone Media | Aerial Photography & Videography Theme
Affected versions: [*, 2.8.0)
Patched versions: 2.8.0
Adrena | Airsoft Club & Paintball WordPress Theme
Affected versions: *-1.2.13
Patched versions: Not supplied
Carz — Car Dealer, Shop & Repair WordPress Theme
Affected versions: [*, 1.6.0)
Patched versions: 1.6.0
AlphaColor - Design & Printing Elementor Template Kit
Affected versions: *-1.4.11.1
Patched versions: Not supplied
Qwery - Multi-Purpose Business WordPress & WooCommerce Theme + ChatGPT
Affected versions: [*, 3.6.0)
Patched versions: 3.6.0
WotaHub | Coworking Space WordPress Theme
Affected versions: *-1.2.2
Patched versions: Not supplied
SoccerClub - Football Team & Soccer League WordPress Theme
Affected versions: [*, 2.5.0)
Patched versions: 2.5.0
Asclepius - Doctor & Medical Theme
Affected versions: [*, 1.25.0)
Patched versions: 1.25.0
Fortunio - Carpenter, Forestry, Wood Manufacture Theme
Affected versions: [*, 2.12.0)
Patched versions: 2.12.0
Good Wine | Vineyard & Winery Shop WordPress Theme
Affected versions: *-1.1.10
Patched versions: Not supplied
Lab - Pharmacy, Laboratory & Research WordPress Theme
Affected versions: [*, 1.3.0)
Patched versions: 1.3.0
Nazareth | Church & Religion WordPress Theme
Affected versions: *-1.0.16
Patched versions: Not supplied
City Hostel | Travel & Hotel Booking WordPress Theme
Affected versions: *-1.2.3
Patched versions: Not supplied
Travesia | Travel Agency and Tour Booking WordPress Theme
Affected versions: *-1.1.15
Patched versions: Not supplied
ProGuards | Safety & Security Site Template
Affected versions: [*, 2.19.0)
Patched versions: 2.19.0
Studeon | Education Center & Training Courses WordPress Theme
Affected versions: *-1.1.15
Patched versions: Not supplied
Bonko | Safari & Zoo WordPress Theme
Affected versions: *-1.0.14
Patched versions: Not supplied
Tantra | Yoga Studio and Fitness Club WordPress Theme
Affected versions: [*, 2.9.0)
Patched versions: 2.9.0
Preston | Fruit Company & Organic Farming WordPress Theme
Affected versions: *-1.1.9
Patched versions: Not supplied
Translang - Language Courses & Translation Services Elementor Template Kit
Affected versions: *-1.1.16
Patched versions: Not supplied
ProDent | Dental Clinic & Doctor WordPress Theme + Elementor + RTL
Affected versions: *-1.5.9
Patched versions: Not supplied
Researcher credit: Bonds, Tran Nguyen Bao Khanh
Applicable copyright and licence notices
This record contains material that is subject to copyright
Copyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Licence reference
This record contains material that is subject to copyright
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
Licence reference