Read the docs

ApusWP

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ApusWP records in CISA KEV

No ApusWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Campress 1 record MEDIUM

Records

3 records

TI-2024-09977 CVE-2024-10763 · GHSA-rq4w-m8c6-7m7r

Campress <= 1.35 - Unauthenticated Local File Inclusion

Priority MEDIUM 55

The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03655 Published 2025-02-13 No fix listed CWE-22
TI-2025-32862 CVE-2025-52812 · GHSA-v8m7-97fv-42g9

WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Domnoo domnoo allows PHP Local File Inclusion.This issue affects Domnoo: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-27 No fix listed CWE-98
TI-2025-32857 CVE-2025-52807 · GHSA-qv33-6p4r-4f6x

WordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Kossy - Minimalist eCommerce WordPress Theme kossy allows PHP Local File Inclusion.This issu…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-07-04 No fix listed CWE-98
Open these records in search →