Read the docs

ApusThemes

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ApusThemes records in CISA KEV

No ApusThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Superio 3 records MEDIUM Careerup 1 record LOW Wp Private Messaging 1 record MEDIUM

Records

3 records in Superio · all components

TI-2022-03761 CVE-2022-4114 · GHSA-g5x7-r2mh-cg68

Superio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site Scripting

Priority MEDIUM 58

The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00508 Published 2023-01-02 Fixed in 1.2.33
TI-2024-11406 CVE-2024-12296 · GHSA-4vxh-jq3c-5rhw

Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options

Priority MEDIUM 41

The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00519 Published 2025-02-12 No fix listed CWE-862
Open these records in search →