What’s Vulnerable › Products
averta Shortcodes and extra features for Phlox theme vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your averta Shortcodes and extra features for Phlox theme version is affected
Latest averta Shortcodes and extra features for Phlox theme vulnerabilities
- CVE-2025-12379 — Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget (CVSS 6.4)
- CVE-2025-13215 — Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure (CVSS 5.3)
- CVE-2025-63071 — WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2024-50500 — WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2024-9545 — Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes (CVSS 5.4)
- CVE-2024-12588 — Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget (CVSS 5.4)
- CVE-2024-8486 — Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets (CVSS 5.4)
- CVE-2023-37888 — WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability (CVSS 9.8)
- CVE-2024-3517 — Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget (CVSS 5.4)
- CVE-2024-3341 — Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode (CVSS 5.4)
- CVE-2024-1533 — Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-1396 — Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' (CVSS 5.4)
- CVE-2024-1348 — Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS (CVSS 5.4)
- CVE-2023-7064 — Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer (CVSS 7.5)
- CVE-2024-1357 — Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode (CVSS 5.4)
- CVE-2024-31099 — WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2023-50368 — WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
- CVE-2022-3359 — Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection (CVSS 8.8)
- CVE-2022-1910 — Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting (CVSS 6.1)