All 6 CVE vulnerabilities found in Apollo13 Framework Extensions, with AI-generated Chinese analysis, references, and POCs.
Vendor: Apollo13Themes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-13617 | Apollo13 Framework Extension <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via `a13_alt_link` Parameter CWE-79 | 6.4 | Medium | 2026-02-19 |
| CVE-2023-25959 | WordPress Apollo13 Framework Extensions plugin <= 1.8.10 - Broken Access Control CWE-862 | 5.4 | Medium | 2024-12-09 |
| CVE-2024-37480 | WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2024-07-21 |
| CVE-2024-24880 | WordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS) CWE-79 | 6.5 | Medium | 2024-02-08 |
| CVE-2023-51539 | WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 | 5.4 | Medium | 2024-01-05 |
| CVE-2023-47190 | WordPress Apollo13 Framework Extensions Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS) CWE-79 | 6.5 | Medium | 2023-11-08 |
All 6 known CVE vulnerabilities affecting Apollo13 Framework Extensions with full Chinese analysis, references, and POCs where available.