Apollo13 Framework Extensions

Apollo13 Framework Extensions has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

Every one of the 6 issues recorded for Apollo13 Framework Extensions has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. Apollo13 Framework Extensions is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Apollo13 Framework Extensions vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-13617

Apollo13 Framework Extension <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via `a13_alt_link` Parameter

Read the full analysis

Vulnerability Records

6 records


2026-02-18 15:32	Apollo13 Framework Extension <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via `a13_alt_link` Parameter Apollo13 Framework Extensions <= 1.9.8	`CVE-2025-13617`	6.4 Medium	Webbernaut	Yes
2024-07-04 00:00	Apollo13 Framework Extensions <= 1.9.3 - Authenticated (Author+) Stored Cross-Site Scripting Apollo13 Framework Extensions <= 1.9.3	`CVE-2024-37480`	6.4 Medium	Michael	Yes
2024-02-05 00:00	Apollo13 Framework Extensions <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Apollo13 Framework Extensions <= 1.9.2	`CVE-2024-24880`	6.4 Medium	LVT-tholv2k	Yes
2023-12-27 00:00	Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery Apollo13 Framework Extensions <= 1.9.1	`CVE-2023-51539`	4.3 Medium	Brandon James Roldan (tomorrowisnew)	Yes
2023-11-03 00:00	Apollo13 Framework Extensions <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Apollo13 Framework Extensions <= 1.9.0	`CVE-2023-47190`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2023-02-24 00:00	Apollo13 Framework Extensions <= 1.8.10 - Missing Authorization Apollo13 Framework Extensions <= 1.8.10	`CVE-2023-25959`	5.4 Medium	István Márton	Yes

Showing 1–6 of 6 reports

Plugin Profile

Latestv1.9.9

Apollo13 Framework Extensions

Author

apollo13themes

5.0(1)

100/100

Last Updated

2025-12-04 (9mo ago)

Active Installs

20,000+

Downloads

544,665

Requires WP

4.7+

Requires PHP

5.4.0+

Tested up to

WP 6.5.10

Created

2018-04-06 (9y ago)

Apollo13 Framework Extensions adds few features to themes build on Apollo13 Framework. These are: Designs Importer, shortcodes based on Apollo13 Framework features: writtng effect, count down, socials, scroller, slider, galleries, post grid, support for WPBakery Page Builder elements added by Apollo13 Framework, custom post types: albums, works & people, Export/Import of theme options, Custom Sidebar, Custom CSS, Meta options that are creating content for posts, pages, albums and works, Responsive Image resizing , Maintenance mode. This plugin requires one of themes build on Apollo13 Framework theme to be installed. It is mostly used for: Rife Free Rife Pro Credits & Copyright Anime.js, Copyright 2019 Julian Garnier Licenses: MIT Source: https://animejs.com/

View on WordPress.org