Apollotheme vulnerabilities
We track 2 vulnerabilities in Apollotheme products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Apollotheme vulnerabilities
- 7.5 High severity
AP Page Builder: Improper Limitation of a Pathname to a Restricted Directory
Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.
- 9.8 Critical severity
Ap Pagebuilder: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.