Vulnerabilities in Apollo13Themes
11 resultsVexday analysis
Apollo13Themes possui 6 vulnerabilidades registradas, todas com severidade abaixo de crítica, nenhuma sob exploração ativa conhecida. A fraqueza predominante é injeção de código (CWE-79), padrão em temas WordPress, sem descobertas recentes nos últimos 90 dias, indicando risco contido e sem urgência operacional imediata.
CVE-2023-25959MEDIUMWordPress Apollo13 Framework Extensions plugin <= 1.8.10 - Broken Access ControlEPSS 0.6%CVE-2023-27454MEDIUMWordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-47190MEDIUMWordPress Apollo13 Framework Extensions Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-5504MEDIUMRife Elementor Extensions & Templates <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline WidgetEPSS 0.3%CVE-2024-24880MEDIUMWordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-37480MEDIUMWordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-13617MEDIUMApollo13 Framework Extension <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via `a13_alt_link` ParameterEPSS 0.3%CVE-2024-13564MEDIUMRife Elementor Extensions & Templates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline ShortcodeEPSS 0.3%CVE-2024-35708MEDIUMWordPress Rife Free theme <= 2.4.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-51539MEDIUMWordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-37491MEDIUMWordPress Rife Free theme <= 2.4.18 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%