Skip to content
OpenAdvisories

Vendor

ApusTheme

18 known vulnerabilities.

ApusTheme at a glance

Last 12 months
6
Critical · all time
3
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 2 vulnerabilities, 1 critical Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 2 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202620
Mar 202600
Feb 202600
Jan 202610
Dec 202521
Nov 202520
Oct 202511
Sep 202510
Aug 202510
Jul 202500
Jun 202500
May 202550
Apr 202500
Mar 202500
Feb 202521
Jan 202500
Dec 202400

Products

Findgo 2 Butcher 2 Famita 1 Freeio 1 Homeo 1 WP Freeio 1 ITok 1 Ogami 1 WP CarDealer 1 Greenorganic 1 Capie 1 Apus Framework 1 Campress 1 Drone 1 Yozi 1 ApusListing 1
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • High 8.8
    CVE-2026-57785

    WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.

    ApusTheme ApusListing
  • High 7.5
    CVE-2026-39681

    WordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Homeo homeo allows PHP Local File Inclusion.This issue affects Homeo: from n/a through <= 1.2.59.

    ApusTheme Homeo
  • High 7.5
    CVE-2026-39679

    WordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Freeio freeio allows PHP Local File Inclusion.This issue affects Freeio: from n/a through <= 1.3.21.

    ApusTheme Freeio
  • High 7.1
    CVE-2025-49249

    WordPress Drone theme <= 1.40 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Drone drone allows Reflected XSS.This issue affects Drone: from n/a through <= 1.40.

    ApusTheme Drone
  • High 8.1
    CVE-2025-53437

    WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Greenorganic greenorganic allows PHP Local File Inclusion.This issue affects Greenorganic: from n/a through <= 2.45.

    ApusTheme Greenorganic
  • Critical 9.8
    CVE-2025-13764

    WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation

    The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16. This is due to the 'WP_CarDealer_User::process_register' function not restricting what user roles a user can register with. This makes it…

    ApusTheme WP CarDealer Web / CMS
  • High 8.1
    CVE-2025-62014

    WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme ITok itok.This issue affects ITok: from n/a through <= 1.1.42.

    ApusTheme ITok
  • High 8.1
    CVE-2025-62010

    WordPress Famita theme <= 1.54 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Famita famita allows PHP Local File Inclusion.This issue affects Famita: from n/a through <= 1.54.

    ApusTheme Famita
  • Critical 9.8
    CVE-2025-11533

    WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation

    The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. This is due to the process_register() function not restricting what user roles a user can register with. This makes it possible for unauthen…

    ApusTheme WP Freeio Web / CMS
  • High 8.8
    CVE-2025-58250

    WordPress Findgo Theme <= 1.3.55 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo fingo allows Authentication Bypass.This issue affects Findgo: from n/a through <= 1.3.55.

    ApusTheme Findgo
  • High 8.8
    CVE-2025-53587

    WordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo findgo allows Cross Site Request Forgery.This issue affects Findgo: from n/a through <= 1.3.57.

    ApusTheme Findgo
  • High 8.1
    CVE-2025-31060

    WordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Capie capie allows PHP Local File Inclusion.This issue affects Capie: from n/a through <= 1.0.40.

    ApusTheme Capie
  • High 8.1
    CVE-2025-31913

    WordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami ogami allows PHP Local File Inclusion.This issue affects Ogami: from n/a through <= 1.53.

    ApusTheme Ogami
  • High 7.1
    CVE-2025-32285

    WordPress Butcher theme < 2.54 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher butcher allows Reflected XSS.This issue affects Butcher: from n/a through < 2.54.

    ApusTheme Butcher
  • High 8.1
    CVE-2025-32286

    WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher butcher allows PHP Local File Inclusion.This issue affects Butcher: from n/a through <= 2.40.

    ApusTheme Butcher
  • High 8.1
    CVE-2025-32289

    WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi yozi allows PHP Local File Inclusion.This issue affects Yozi: from n/a through <= 2.0.63.

    ApusTheme Yozi
  • Critical 9.8
    CVE-2024-10763 Scanner template

    Campress <= 1.35 - Unauthenticated Local File Inclusion

    The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function. This makes it possible for unauthenticated attackers to include and execute arbitrary …

    ApusTheme Campress Web / CMS
  • High 8.8
    CVE-2024-12296

    Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options

    The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.4. This makes it p…

    ApusTheme Apus Framework Web / CMS