Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: ApusWP Clear all filters
TI-2025-32857 CVE-2025-52807 · GHSA-qv33-6p4r-4f6x

WordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Kossy - Minimalist eCommerce WordPress Theme kossy allows PHP Local File Inclusion.This issu…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-07-04 No fix listed CWE-98
TI-2025-32862 CVE-2025-52812 · GHSA-v8m7-97fv-42g9

WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Domnoo domnoo allows PHP Local File Inclusion.This issue affects Domnoo: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-27 No fix listed CWE-98
TI-2024-09977 CVE-2024-10763 · GHSA-rq4w-m8c6-7m7r

Campress <= 1.35 - Unauthenticated Local File Inclusion

Priority MEDIUM 55

The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03655 Published 2025-02-13 No fix listed CWE-22