Sploitus

6 exploited vulnerabilities in Wp Page Builder

Vulnerabilities with publicly known exploits

Vendors
Joomla, Apollotheme, WordPress
With known exploits
6
Affected Ollyo Sp Page Builder versions
< 6.6.2
Affected Apollotheme Ap Pagebuilder versions
≤ 2.4.5, 2.4.4
Affected Themeum Wp Page Builder versions
< 1.2.4, 1.2.8

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2026-48908 7 exploits
CVSS 10.0 CRITICAL 2026-06-15FIX AVAILABLE
Exploit for Unrestricted Upload of File with Dangerous Type in Ollyo Sp_Page_BuilderExploit for Unrestricted Upload of File with Dangerous Type in Ollyo Sp_Page_Builder
CVE-2022-22897 2 exploits
CVSS 9.8 CRITICAL 2022-08-29
PrestaShop Ap Pagebuilder 2.4.4 SQL Injection VulnerabilityPrestaShop Ap Pagebuilder 2.4.4 SQL Injection
CVE-2022-44897
CVSS 6.1 MEDIUM 2023-01-31
CVE-2021-24208
CVSS 5.4 MEDIUM 2021-04-05FIX AVAILABLE
CVE-2022-3830 1 exploit
CVSS 4.8 MEDIUM 2022-12-05FIX AVAILABLE
WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
CVE-2021-24207 2 exploits
CVSS 4.3 MEDIUM 2021-04-05FIX AVAILABLE
CVE-2021-24207WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts