Skip to content
AApusTheme
Products
| Product | CVEs | Exploited | Latest |
| Butcher | 2 | – | May 23, 2025 |
| Findgo | 2 | – | Sep 22, 2025 |
| Campress | 1 | – | Feb 13, 2025 |
| Capie | 1 | – | May 23, 2025 |
| Drone | 1 | – | Jan 22, 2026 |
| Famita | 1 | – | Nov 6, 2025 |
| Freeio | 1 | – | Apr 8, 2026 |
| Greenorganic | 1 | – | Dec 18, 2025 |
| Homeo | 1 | – | Apr 8, 2026 |
| ITok | 1 | – | Nov 6, 2025 |
| Ogami | 1 | – | May 23, 2025 |
| WP CarDealer | 1 | – | Dec 11, 2025 |
| WP Freeio | 1 | – | Oct 11, 2025 |
| Apus Framework | 1 | – | Feb 12, 2025 |
| Yozi | 1 | – | May 23, 2025 |
| ApusListing | 1 | – | Jul 23, 2026 |
Exploited and recent CVEs
-
CVE-2026-57785
High 8.8
WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability
0.2%
-
CVE-2026-39681
High 7.5
WordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability
0.4%
-
CVE-2026-39679
High 7.5
WordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability
0.4%
-
CVE-2025-49249
High 7.1
WordPress Drone theme <= 1.40 - Reflected Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2025-53437
High 8.1
WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability
0.5%
-
CVE-2025-13764
Critical 9.8
WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation
0.3%
-
CVE-2025-62014
High 8.1
WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability
0.5%
-
CVE-2025-62010
High 8.1
WordPress Famita theme <= 1.54 - Local File Inclusion vulnerability
0.5%
-
CVE-2025-11533
Critical 9.8
WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation
0.6%
-
CVE-2025-58250
High 8.8
WordPress Findgo Theme <= 1.3.55 - Cross Site Request Forgery (CSRF) Vulnerability
0.2%
-
CVE-2025-53587
High 8.8
WordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) Vulnerability
0.2%
-
CVE-2025-31060
High 8.1
WordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability
0.8%
-
CVE-2025-31913
High 8.1
WordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability
0.8%
-
CVE-2025-32285
High 7.1
WordPress Butcher theme < 2.54 - Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2025-32286
High 8.1
WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability
0.8%
-
CVE-2025-32289
High 8.1
WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability
0.8%
-
CVE-2024-10763
Critical 9.8
Campress <= 1.35 - Unauthenticated Local File Inclusion
3.7%
-
CVE-2024-12296
High 8.8
Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options
0.5%