Skip to content
OpenAdvisories

Vendor

ApusTheme

18 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8

    WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation

    The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16. This is due to the 'WP_CarDealer_User::process_register' function not restricting what user roles a user can register with. This makes it…

  • Critical 9.8

    WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation

    The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. This is due to the process_register() function not restricting what user roles a user can register with. This makes it possible for unauthen…

  • Critical 9.8
    CVE-2024-10763 Scanner template

    Campress <= 1.35 - Unauthenticated Local File Inclusion

    The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function. This makes it possible for unauthenticated attackers to include and execute arbitrary …