Apollotheme Ap Pagebuilder — known CVE vulnerabilities

Every CVE whose affected-product data names Apollotheme Ap Pagebuilder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-22897 — CVSS 9.8 (critical): A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through…
• CVE-2024-6648 — CVSS 7.5 (high): Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the…
• CVE-2022-44897 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web…