theme

Elementra Vulnerabilities

2 known security issues reported for the Elementra WordPress theme. Most recent disclosed Apr 20, 2026.

2 high

Running Elementra on your site? Check whether your installed version is affected.

Scan your site free

Elementra - 100% Elementor WordPress Theme <= 1.0.9 - Unauthenticated PHP Object Injection

high

The Elementra - 100% Elementor WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.0.9 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software....

CVSS:
8.1
Affected:
up to 1.0.9
Fixed in:
1.1.0
Disclosed:
Apr 20, 2026

CVE-2026-39529 on NVD →

Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion

high

Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in various versions. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to...

CVSS:
8.1
Affected:
up to 1.0.7
Fixed in:
1.0.8
Disclosed:
Jun 9, 2025

CVE-2025-26592 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database