Read the docs

ApusTheme

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

ApusTheme records in CISA KEV

No ApusTheme vulnerabilities are listed in CISA KEV.

Records

16 records

TI-2025-10568 CVE-2025-11533 · GHSA-9x94-9742-rrg5

WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation

Priority MEDIUM 50

The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00619 Published 2025-10-11 No fix listed CWE-269
TI-2025-12580 CVE-2025-13764 · GHSA-pp9r-whq8-62xh

WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation

Priority MEDIUM 49

The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00349 Published 2025-12-11 No fix listed CWE-269
TI-2025-23386 CVE-2025-32289 · GHSA-2659-8m74-4v6x

WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi yozi allows PHP Local File Inclusion.This issue affects Yozi: from n/a through <= 2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-23383 CVE-2025-32286 · GHSA-fhfv-mjv5-35hp

WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher butcher allows PHP Local File Inclusion.This issue affects Butcher: from n/a thro…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-23050 CVE-2025-31913 · GHSA-w3mv-rjr4-wpcg

WordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami ogami allows PHP Local File Inclusion.This issue affects Ogami: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-22330 CVE-2025-31060 · GHSA-v5wj-4vcq-v5gw

WordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Capie capie allows PHP Local File Inclusion.This issue affects Capie: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-38337 CVE-2025-62014 · GHSA-q785-f6ff-vwgw

WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme ITok itok.This issue affects ITok: from n/a through <= 1.1.42.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00546 Published 2025-11-06 No fix listed CWE-98
TI-2025-38333 CVE-2025-62010 · GHSA-9h9p-fpp6-8v2m

WordPress Famita theme <= 1.54 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Famita famita allows PHP Local File Inclusion.This issue affects Famita: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00535 Published 2025-11-06 No fix listed CWE-98
TI-2025-33383 CVE-2025-53437 · GHSA-7vhf-r2mp-6c2q

WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Greenorganic greenorganic allows PHP Local File Inclusion.This issue affects Greenorganic…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00499 Published 2025-12-18 No fix listed CWE-98
TI-2026-28650 CVE-2026-39681 · GHSA-c4fh-xf35-vp6g

WordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Homeo homeo allows PHP Local File Inclusion.This issue affects Homeo: from n/a through <=…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98
TI-2026-28648 CVE-2026-39679 · GHSA-2qmh-3x75-j23v

WordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Freeio freeio allows PHP Local File Inclusion.This issue affects Freeio: from n/a through…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98
TI-2025-23382 CVE-2025-32285 · GHSA-5j6j-9vjj-6r3v

WordPress Butcher theme < 2.54 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher butcher allows Reflected XSS.This issue affects Butcher: from n/a through < 2.54.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2025-05-23 No fix listed CWE-79
Open these records in search →