Apollo13Themes

Products

ProductCVEsExploitedLatest
Apollo13 Framework Extensions6–Feb 19, 2026
Rife Extensions & Templates for Elementor2–Feb 22, 2025
Rife Free2–Jan 2, 2025
Rife Elementor Extensions & Templates1–Dec 9, 2024

Exploited and recent CVEs

  • CVE-2025-13617 Medium 6.4 Apollo13 Framework Extension <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via `a13_alt_link` Parameter 0.3%
  • CVE-2024-13564 Medium 6.4 Rife Elementor Extensions & Templates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Shortcode 0.3%
  • CVE-2024-37491 Medium 4.3 WordPress Rife Free theme <= 2.4.18 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-25959 Medium 5.4 WordPress Apollo13 Framework Extensions plugin <= 1.8.10 - Broken Access Control 0.6%
  • CVE-2023-27454 Medium 5.4 WordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability 0.5%
  • CVE-2024-37480 Medium 6.5 WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5504 Medium 6.4 Rife Elementor Extensions & Templates <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Widget 0.3%
  • CVE-2024-35708 Medium 6.5 WordPress Rife Free theme <= 2.4.19 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-24880 Medium 6.5 WordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-51539 Medium 5.4 WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-47190 Medium 6.5 WordPress Apollo13 Framework Extensions Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS) 0.4%