Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-47190 1 Apollo13themes 1 Apollo13 Framework Extensions 2026-04-29 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plugin <= 1.9.0 versions.
CVE-2021-24265 1 Apollo13themes 1 Rife Elementor Extensions \& Templates 2024-11-21 5.4 Medium
The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method.