CyberSecBulletin

ApusThemes vulnerabilities

We track 3 vulnerabilities in ApusThemes products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 1, 2025.

3vulnerabilities
2critical
1high
0exploited
9.5average CVSS score

Latest ApusThemes vulnerabilities

  • 9.8 Critical severity

    WP RealEstate: Improper Privilege Management

    CVE-2025-2237ApusThemes

    The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to privilege escalation in all versions up to, and including, 1.6.26. This is due to insufficient role restrictions in the 'process_register' function. This makes it possible for un

  • 8.8 High severity

    Apus Framework: Missing Authorization

    CVE-2024-12296ApusTheme

    The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.4. This makes it po

  • 9.8 Critical severity

    WP Job Board Pro: Incorrect Privilege Assignment

    CVE-2024-12213Http://apusthemes.com/

    The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to registe