ApusThemes records
5 published records for vendor apusthemes.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 40%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-266 Incorrect Privilege Assignment1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-12213No exploit | WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_registerapusthemes · superio · CWE-266 | Critical9.8 | — | 0.6% | Feb 12, 2025 |
35Monitor | CVE-2024-12296No exploit | Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_optionsapusthemes · superio · CWE-862 | High8.8 | — | 0.5% | Feb 12, 2025 |
24Monitor | CVE-2022-1167No exploit | CareerUp < 2.3.1 - Unauthenticated Reflected Cross-Site Scriptingapusthemes · careerup · CWE-79 | Medium6.1 | — | 1.1% | Apr 4, 2022 |
21Monitor | CVE-2022-4114No exploit | Superio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site Scriptingapusthemes · superio · CWE-79 | Medium5.4 | — | 0.5% | Jan 2, 2023 |
17Monitor | CVE-2023-0453No exploit | WP Private Message < 1.0.6 - Private Message Disclosure via IDORapusthemes · wp private messaging · CWE-639 | Medium4.3 | — | 0.5% | Feb 21, 2023 |
- CVE-2024-1221339Monitor
WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
CriticalCVSS 9.8No exploitEPSS 0%apusthemes · superioFeb 12, 2025
- CVE-2024-1229635Monitor
Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options
HighCVSS 8.8No exploitEPSS 0%apusthemes · superioFeb 12, 2025
- CVE-2022-116724Monitor
CareerUp < 2.3.1 - Unauthenticated Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%apusthemes · careerupApr 4, 2022
- CVE-2022-411421Monitor
Superio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%apusthemes · superioJan 2, 2023
- CVE-2023-045317Monitor
WP Private Message < 1.0.6 - Private Message Disclosure via IDOR
MediumCVSS 4.3No exploitEPSS 0%apusthemes · wp private messagingFeb 21, 2023