{"id":"CVE-2024-50500","aliases":["EUVD-2024-44627","GHSA-wmhp-g4mm-69rg"],"status":"published","title":"WordPress Phlox Core Elements plugin \u003c= 2.17.4 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through \u003c= 2.17.4.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00433,"percentile":0.38103,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-02-03T14:23:50Z","modified":"2026-06-17T08:04:35Z","products":[{"vendor":"averta","product":"shortcodes and extra features for phlox theme"},{"vendor":"averta","product":"shortcodes_and_extra_features_for_phlox_theme"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/auxin-elements/vulnerability/wordpress-phlox-core-elements-plugin-2-17-2-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50500"},{"url":"https://patchstack.com/database/wordpress/plugin/auxin-elements/vulnerability/wordpress-phlox-core-elements-plugin-2-17-2-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-wmhp-g4mm-69rg"}],"sources":{"cve":[{"id":"CVE-2024-50500","title":"WordPress Phlox Core Elements plugin \u003c= 2.17.4 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through \u003c= 2.17.4.","status":"published","published":"2025-02-03T14:23:50.221Z","modified":"2026-05-11T23:26:43.006Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:21.784174Z"}],"euvd":[{"id":"EUVD-2024-44627","description":"Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through \u003c= 2.17.4.","status":"published","published":"2025-02-03T14:23:50Z","modified":"2026-05-11T23:26:43Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:04:41.326864Z"}],"ghsa":[{"id":"GHSA-wmhp-g4mm-69rg","title":"Missing Authorization vulnerability in By Averta Shortcodes and extra features for Phlox theme...","description":"Missing Authorization vulnerability in By Averta Shortcodes and extra features for Phlox theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.17.2.","status":"published","published":"2025-02-03T15:32:02Z","modified":"2025-02-03T15:32:06Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:59:45.515027Z"}],"nvd":[{"id":"CVE-2024-50500","description":"Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through \u003c= 2.17.4.","status":"published","published":"2025-02-03T15:15:17.367Z","modified":"2026-06-17T08:04:35.173Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:43.581383Z"}]}}