How many apostrophecms import-export CVEs are in CISA KEV?

None of apostrophecms import-export's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for apostrophecms import-export vulnerabilities?

Yes — 1 of apostrophecms import-export's CVEs have a known public exploit.

Which versions of apostrophecms import-export are affected?

2 distinct apostrophecms import-export versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in apostrophecms import-export CVEs?

apostrophecms import-export's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical apostrophecms import-export vulnerabilities are there?

apostrophecms import-export has 1 critical and 0 high-severity CVEs.

What is the average severity of apostrophecms import-export CVEs?

The average CVSS base score across apostrophecms import-export's scored CVEs is 10.0.

RadicalNotion.AI

Log in Create an account

apostrophecms

1 CVEs

apostrophecms import-export Vulnerabilities

Name: apostrophecms import-export vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for import-export by apostrophecms.

1

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

10.0

Avg CVSS

2026–2026

Last updated March 18, 2026

Overview

apostrophecms import-export has 1 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 10.0.

Severity and exploitation

How the CVSS severity of apostrophecms import-export's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of apostrophecms import-export's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of apostrophecms import-export's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every apostrophecms import-export version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.5.31 CVE

Fixed in

3.5.31 CVE

Find a version

1 CVE

Sort

ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction
CVE-2026-32731
Public exploit
Patch
CWE-22
Critical · CVSS 10.0
EPSS 0.6% (48th pct)2026-03-18

Common weakness types

The CWE weakness categories most often found in apostrophecms import-export CVEs. Follow any weakness for its full explanation.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Other apostrophecms products

Browse vulnerabilities for other products by apostrophecms.

apostrophe26 CVEs sanitize-html13 CVEs apostrophecms10 CVEs @apostrophecms/import-export2 CVEs @apostrophecms/cli1 CVEs @apostrophecms/seo1 CVEs

All apostrophecms vulnerabilities

Frequently asked questions

Common questions about apostrophecms import-export vulnerabilities.

How many CVEs does apostrophecms import-export have?: apostrophecms import-export has 1 published CVE records since 2026.
How many apostrophecms import-export CVEs are in CISA KEV?: None of apostrophecms import-export's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for apostrophecms import-export vulnerabilities?: Yes — 1 of apostrophecms import-export's CVEs have a known public exploit.
Which versions of apostrophecms import-export are affected?: 2 distinct apostrophecms import-export versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in apostrophecms import-export CVEs?: apostrophecms import-export's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical apostrophecms import-export vulnerabilities are there?: apostrophecms import-export has 1 critical and 0 high-severity CVEs.
What is the average severity of apostrophecms import-export CVEs?: The average CVSS base score across apostrophecms import-export's scored CVEs is 10.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track apostrophecms import-export vulnerabilities

Get an alert for each new apostrophecms import-export CVE, with AI-written analysis and remediation steps.

Create an account See pricing