<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ancorathemes</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-58901: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58901.html</link><guid>https://patchthecve.com/cve/CVE-2025-58901.html</guid><pubDate>Wed, 17 Jun 2026 09:45:15 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through &lt;= 1.3.0.</description></item><item><title>CVE-2025-58900: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58900.html</link><guid>https://patchthecve.com/cve/CVE-2025-58900.html</guid><pubDate>Wed, 17 Jun 2026 09:45:15 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes UniTravel unitravel allows PHP Local File Inclusion.This issue affects UniTravel: from n/a through &lt;= 1.4.2.</description></item><item><title>CVE-2025-58899: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58899.html</link><guid>https://patchthecve.com/cve/CVE-2025-58899.html</guid><pubDate>Wed, 17 Jun 2026 09:45:15 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Frame frame allows PHP Local File Inclusion.This issue affects Frame: from n/a through &lt;= 2.4.0.</description></item><item><title>CVE-2025-58898: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58898.html</link><guid>https://patchthecve.com/cve/CVE-2025-58898.html</guid><pubDate>Wed, 17 Jun 2026 09:45:15 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes HealthHub healthhub allows PHP Local File Inclusion.This issue affects HealthHub: from n/a through &lt;= 1.3.0.</description></item><item><title>CVE-2025-58896: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58896.html</link><guid>https://patchthecve.com/cve/CVE-2025-58896.html</guid><pubDate>Wed, 17 Jun 2026 09:45:15 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through &lt;= 1.8.0.</description></item><item><title>CVE-2025-58895: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58895.html</link><guid>https://patchthecve.com/cve/CVE-2025-58895.html</guid><pubDate>Wed, 17 Jun 2026 09:45:15 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Integro integro allows PHP Local File Inclusion.This issue affects Integro: from n/a through &lt;= 1.8.0.</description></item><item><title>CVE-2025-58892: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58892.html</link><guid>https://patchthecve.com/cve/CVE-2025-58892.html</guid><pubDate>Wed, 17 Jun 2026 09:45:14 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Tourimo tourimo allows PHP Local File Inclusion.This issue affects Tourimo: from n/a through &lt;= 1.2.3.</description></item><item><title>CVE-2025-58891: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58891.html</link><guid>https://patchthecve.com/cve/CVE-2025-58891.html</guid><pubDate>Wed, 17 Jun 2026 09:45:14 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Sanger sanger allows PHP Local File Inclusion.This issue affects Sanger: from n/a through &lt;= 1.24.0.</description></item><item><title>CVE-2025-58890: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58890.html</link><guid>https://patchthecve.com/cve/CVE-2025-58890.html</guid><pubDate>Wed, 17 Jun 2026 09:45:14 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Playful playful allows PHP Local File Inclusion.This issue affects Playful: from n/a through &lt;= 1.19.0.</description></item><item><title>CVE-2025-58888: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58888.html</link><guid>https://patchthecve.com/cve/CVE-2025-58888.html</guid><pubDate>Wed, 17 Jun 2026 09:45:14 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through &lt;= 1.15.</description></item><item><title>CVE-2025-58885: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58885.html</link><guid>https://patchthecve.com/cve/CVE-2025-58885.html</guid><pubDate>Mon, 05 Oct 2026 14:10:00 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Pathfinder pathfinder allows PHP Local File Inclusion.This issue affects Pathfinder: from n/a through &lt;= 1.16.</description></item><item><title>CVE-2025-58879: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulner</title><link>https://patchthecve.com/cve/CVE-2025-58879.html</link><guid>https://patchthecve.com/cve/CVE-2025-58879.html</guid><pubDate>Wed, 17 Jun 2026 09:45:13 +0000</pubDate><description>HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program (&#x27;PHP Remote File Inclusion&#x27;) vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through &lt;= 1.13.0.</description></item></channel></rss>