Skip to content
OpenAdvisories

Vendor

ApusTheme

18 known vulnerabilities.

Products

Findgo 2 Butcher 2 Famita 1 Freeio 1 Homeo 1 WP Freeio 1 ITok 1 Ogami 1 WP CarDealer 1 Greenorganic 1 Capie 1 Apus Framework 1 Campress 1 Drone 1 Yozi 1 ApusListing 1
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.8
    CVE-2026-57785

    WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.

    ApusTheme ApusListing
  • High 7.5
    CVE-2026-39681

    WordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Homeo homeo allows PHP Local File Inclusion.This issue affects Homeo: from n/a through <= 1.2.59.

    ApusTheme Homeo
  • High 7.5
    CVE-2026-39679

    WordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Freeio freeio allows PHP Local File Inclusion.This issue affects Freeio: from n/a through <= 1.3.21.

    ApusTheme Freeio
  • High 7.1
    CVE-2025-49249

    WordPress Drone theme <= 1.40 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Drone drone allows Reflected XSS.This issue affects Drone: from n/a through <= 1.40.

    ApusTheme Drone
  • High 8.1
    CVE-2025-53437

    WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Greenorganic greenorganic allows PHP Local File Inclusion.This issue affects Greenorganic: from n/a through <= 2.45.

    ApusTheme Greenorganic
  • High 8.1
    CVE-2025-62014

    WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme ITok itok.This issue affects ITok: from n/a through <= 1.1.42.

    ApusTheme ITok
  • High 8.1
    CVE-2025-62010

    WordPress Famita theme <= 1.54 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Famita famita allows PHP Local File Inclusion.This issue affects Famita: from n/a through <= 1.54.

    ApusTheme Famita
  • High 8.8
    CVE-2025-58250

    WordPress Findgo Theme <= 1.3.55 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo fingo allows Authentication Bypass.This issue affects Findgo: from n/a through <= 1.3.55.

    ApusTheme Findgo
  • High 8.8
    CVE-2025-53587

    WordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo findgo allows Cross Site Request Forgery.This issue affects Findgo: from n/a through <= 1.3.57.

    ApusTheme Findgo
  • High 8.1
    CVE-2025-31060

    WordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Capie capie allows PHP Local File Inclusion.This issue affects Capie: from n/a through <= 1.0.40.

    ApusTheme Capie
  • High 8.1
    CVE-2025-31913

    WordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami ogami allows PHP Local File Inclusion.This issue affects Ogami: from n/a through <= 1.53.

    ApusTheme Ogami
  • High 7.1
    CVE-2025-32285

    WordPress Butcher theme < 2.54 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher butcher allows Reflected XSS.This issue affects Butcher: from n/a through < 2.54.

    ApusTheme Butcher
  • High 8.1
    CVE-2025-32286

    WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher butcher allows PHP Local File Inclusion.This issue affects Butcher: from n/a through <= 2.40.

    ApusTheme Butcher
  • High 8.1
    CVE-2025-32289

    WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi yozi allows PHP Local File Inclusion.This issue affects Yozi: from n/a through <= 2.0.63.

    ApusTheme Yozi
  • High 8.8
    CVE-2024-12296

    Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options

    The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.4. This makes it p…

    ApusTheme Apus Framework Web / CMS