---
title: "AncoraThemes vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/ancorathemes
type: vendor
description: "AncoraThemes has 140 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2026-10-23
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# AncoraThemes vulnerabilities

- **Published CVEs:** 140
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 2
- **Average CVSS:** 8.4
- **CVEs in the last two years:** 140
- **First CVE:** 2025-05-23
- **Latest CVE:** 2026-10-23

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 21 |
| High | 119 |
| Medium | 0 |
| Low | 0 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [CleanSkin](https://radicalnotion.ai/vendor/ancorathemes/cleanskin) | 2 |
| [Adrena](https://radicalnotion.ai/vendor/ancorathemes/adrena) | 1 |
| [Apollo \\| Night Club, DJ Event WordPress Theme](https://radicalnotion.ai/vendor/ancorathemes/apollo-night-club-dj-event-wordpress-theme) | 1 |
| [Agora](https://radicalnotion.ai/vendor/ancorathemes/agora) | 1 |
| [Anderson](https://radicalnotion.ai/vendor/ancorathemes/anderson) | 1 |
| [Anesta](https://radicalnotion.ai/vendor/ancorathemes/anesta) | 1 |
| [Advice](https://radicalnotion.ai/vendor/ancorathemes/advice) | 1 |
| [Accalia](https://radicalnotion.ai/vendor/ancorathemes/accalia) | 1 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-98](https://radicalnotion.ai/cwe/cwe-98) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 118 |
| [CWE-502](https://radicalnotion.ai/cwe/cwe-502) | Deserialization of Untrusted Data | 22 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [Patchstack](https://radicalnotion.ai/cna/patchstack) | 140 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2025 | 55 |
| 2026 | 85 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-112850 | WordPress Your Dress theme \<= 1.4.1 - Local File Inclusion vulnerability | high | 8.1 | 0.3% | No | 2026-10-23 |
| CVE-2026-78533 | WordPress Qwery theme \<= 3.6.1 - PHP Object Injection vulnerability | critical | 9.8 | 0.3% | No | 2026-10-10 |
| CVE-2026-66567 | WordPress Anesta theme \<= 1.5.3 - PHP Object Injection vulnerability | critical | 9.8 | 0.3% | No | 2026-10-10 |
| CVE-2026-66482 | WordPress Drone Media theme \<= 2.2.0 - PHP Object Injection vulnerability | critical | 9.8 | 0.3% | No | 2026-10-10 |
| CVE-2026-42724 | WordPress CleanSkin theme \<= 1.5.0 - Local File Inclusion vulnerability | high | 8.1 | 0.3% | No | 2026-10-10 |
| CVE-2026-42723 | WordPress CleanSkin theme \<= 1.5.0 - PHP Object Injection vulnerability | critical | 9.8 | 0.4% | No | 2026-10-10 |
| CVE-2026-65578 | WordPress Agora theme \<= 1.9 - PHP Object Injection vulnerability | critical | 9.8 | 0.6% | No | 2026-08-06 |
| CVE-2026-65577 | WordPress Advice theme \<= 1.18.0 - PHP Object Injection vulnerability | critical | 9.8 | 0.6% | No | 2026-08-06 |
| CVE-2026-65576 | WordPress Adrena theme \<= 1.2.14 - PHP Object Injection vulnerability | critical | 9.8 | 0.6% | No | 2026-08-06 |
| CVE-2026-65575 | WordPress Accalia theme \<= 1.5.3 - PHP Object Injection vulnerability | critical | 9.8 | 0.6% | No | 2026-08-06 |
| CVE-2026-65574 | WordPress Abogado theme \<= 1.18 - PHP Object Injection vulnerability | critical | 9.8 | 0.6% | No | 2026-08-06 |
| CVE-2025-58902 | WordPress Lighthouse theme \<= 1.2.12 - Local File Inclusion vulnerability | high | 8.1 | 0.5% | No | 2026-07-02 |

## Frequently asked questions

### How many CVEs does AncoraThemes have?

AncoraThemes has 140 published CVE records since 2025, including 140 in the last two years.

### How many AncoraThemes CVEs are in CISA KEV?

None of AncoraThemes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which AncoraThemes products have the most CVEs?

The AncoraThemes products with the most published CVEs are CleanSkin, Adrena, Apollo \| Night Club, DJ Event WordPress Theme, Agora, Anderson.

### What are the most common weakness types in AncoraThemes CVEs?

AncoraThemes's CVEs most often map to these CWE weakness types: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')), CWE-502 (Deserialization of Untrusted Data).

### Are there public exploits for AncoraThemes vulnerabilities?

No AncoraThemes CVEs currently have a tracked public exploit in this dataset.

### How many critical AncoraThemes vulnerabilities are there?

AncoraThemes has 21 critical and 119 high-severity CVEs.

### What is the average severity of AncoraThemes CVEs?

The average CVSS base score across AncoraThemes's scored CVEs is 8.4.

## Related vendors

- [NEC](https://radicalnotion.ai/vendor/nec) (141 CVEs)
- [Tungsten Automation](https://radicalnotion.ai/vendor/tungsten-automation) (141 CVEs)
- [Kubernetes](https://radicalnotion.ai/vendor/kubernetes) (140 CVEs)
- [ruby-lang](https://radicalnotion.ai/vendor/rubylang) (140 CVEs)
- [anisha](https://radicalnotion.ai/vendor/anisha) (140 CVEs)
- [Avaya](https://radicalnotion.ai/vendor/avaya) (140 CVEs)
- [Asterisk](https://radicalnotion.ai/vendor/asterisk) (139 CVEs)
- [NLnet Labs](https://radicalnotion.ai/vendor/nlnet-labs) (139 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ancorathemes). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.