Apollo13themes vulnerabilities

Products

• Apollo13 Framework Extensions 6
• Apollo13 Framework Extensions 4
• Rife Elementor Extensions & Templates 2
• Rife Elementor Extensions \& Templates 2
• Rife Extensions & Templates For Elementor 2
• Rife Free 2

Newest

• apollo13themes apollo13 framework extensions Apollo13 Framework Extension <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via `a13_alt_link` Parameter CVE-2025-13617 6.4 MediumFebruary 19, 2026
• apollo13 rife elementor extensions \& templates, apollo13themes rife extensions & templates for elementor +1 more Rife Elementor Extensions & Templates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Shortcode CVE-2024-13564 6.4 MediumFebruary 22, 2025
• apollo13themes rife free WordPress Rife Free theme <= 2.4.18 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37491 4.3 MediumJanuary 2, 2025
• apollo13themes apollo13 framework extensions WordPress Apollo13 Framework Extensions plugin <= 1.8.10 - Broken Access Control CVE-2023-25959 5.4 MediumDecember 9, 2024
• apollo13themes rife elementor extensions & templates WordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability CVE-2023-27454 5.4 MediumDecember 9, 2024
• apollo13themes apollo13 framework extensions WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-37480 6.5 MediumJuly 21, 2024
• apollo13themes rife extensions & templates for elementor, rife elementor extensions \& templates +1 more Rife Elementor Extensions & Templates <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Widget CVE-2024-5504 6.4 MediumJuly 2, 2024
• apollo13themes rife free WordPress Rife Free theme <= 2.4.19 - Cross Site Scripting (XSS) vulnerability CVE-2024-35708 6.5 MediumJune 8, 2024
• apollo13themes apollo13 framework extensions WordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24880 6.5 MediumFebruary 8, 2024
• apollo13themes apollo13 framework extensions WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-51539 5.4 MediumJanuary 5, 2024
• apollo13themes apollo13 framework extensions WordPress Apollo13 Framework Extensions Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47190 6.5 MediumNovember 8, 2023
• apollo13themes rife elementor extensions & templates, rife elementor extensions \& templates +1 more Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS CVE-2021-24265 5.4 MediumMay 5, 2021