Vendors / ApusWP Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now ApusWP records in CISA KEV No ApusWP vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03655 · Published 2025-02-13 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical1 High2 Medium0 Low0 No CVSS0