This page lists publicly disclosed CVE vulnerabilities affecting apollo13themes apollo13_framework_extensions (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-37480 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Apollo13Themes Apollo13 Framework Extensions apollo13-framework-extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.3. | [email protected] | 6.5 | 0.30% | 2024-07-21 | 2026-06-17 |
| CVE-2024-24880 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.2. | [email protected] | 6.5 | 0.32% | 2024-02-08 | 2026-06-17 |
| CVE-2023-51539 | Cross-Site Request Forgery (CSRF) vulnerability in Apollo13Themes Apollo13 Framework Extensions.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.1. | [email protected] | 5.4 | 0.22% | 2024-01-05 | 2026-06-17 |
| CVE-2023-47190 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plugin <= 1.9.0 versions. | [email protected] | 6.5 | 0.39% | 2023-11-08 | 2026-06-17 |