Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

AivahThemes Anona Allows Access to Unauthorized Areas

CVE-2025-68902 · published 9 months ago
Summary

Anona, a website template, has a security weakness that lets an attacker access sensitive areas of a site. This could allow unauthorized access to data or files. AivahThemes should be contacted to confirm the version of Anona you're using and apply any available security updates to address this issue.

Original advisory text
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published22 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-68902 · NVD
Track software like this
Free during beta