PT-2025-20380 · Unknown · Wp Page Builder
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
AP Page Builder versions prior to 4.0.0
Description
The issue is an Absolute Path Traversal vulnerability that could allow an unauthenticated remote user to modify the
product item path within the config JSON file, allowing them to read any file on the system.Recommendations
For AP Page Builder versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
config JSON file to prevent modification of the product item path.Fix
RCE
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Page Builder