Averta vulnerabilities

Products

• Shortcodes And Extra Features For Phlox Theme 22
• Master Slider 19
• Shortcodes And Extra Features For Phlox Theme 16
• Master Slider 11
• Depicter — Popup & Slider Builder 10
• Master Slider – Responsive Touch Slider 9
• Depicter Slider 8
• Depicter Slider 6
• Master Slider Pro 4
• Premium Portfolio Features For Phlox Theme 3
• Auxinportfolio 2
• Master Slider Pro 2
• Phlox 2

Newest

• averta depicter — popup & slider builder Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload CVE-2026-113472 5.4 MediumOctober 23, 2026
• averta master slider Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes CVE-2026-14844 6.8 MediumSeptember 20, 2026
• averta depicter — popup & slider builder Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import CVE-2026-15049 7.2 HighAugust 20, 2026
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.24 - Sensitive Data Exposure vulnerability CVE-2026-74008 5.3 MediumAugust 18, 2026
• averta depicter slider WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability CVE-2026-66622 7.5 HighAugust 18, 2026
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Cross Site Scripting (XSS) vulnerability CVE-2026-57737 6.5 MediumJuly 1, 2026
• averta master slider WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-56014 7.1 HighJune 25, 2026
• averta master slider WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-48968 6.5 MediumMay 27, 2026
• averta depicter slider WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability CVE-2025-68558 6.5 MediumJanuary 22, 2026
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget CVE-2025-12379 6.4 MediumJanuary 10, 2026
• averta phlox Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute CVE-2025-4776 6.4 MediumJanuary 6, 2026
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure CVE-2025-13215 5.3 MediumJanuary 6, 2026
• averta depicter — popup & slider builder Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates CVE-2025-11370 5.3 MediumJanuary 6, 2026
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Broken Access Control vulnerability CVE-2025-69016 4.3 MediumDecember 30, 2025
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability CVE-2025-63071 5.3 MediumDecember 9, 2025
• averta master slider pro WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability CVE-2025-63045 6.5 MediumDecember 9, 2025
• averta premium portfolio features for phlox theme Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path] CVE-2025-12497 8.1 HighNovember 5, 2025
• averta depicter — popup & slider builder Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Con… CVE-2025-11373 4.3 MediumNovember 5, 2025
• averta depicter — popup & slider builder Depicter <= 4.0.4 - Cross-Site Request Forgery CVE-2025-8383 4.3 MediumOctober 31, 2025
• averta master slider WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58025 6.5 MediumSeptember 22, 2025
• averta master slider – responsive touch slider, master slider +1 more Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes CVE-2025-5291 6.4 MediumJune 17, 2025
• averta master slider WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability CVE-2025-39412 4.3 MediumMay 19, 2025
• averta depicter — popup & slider builder Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter CVE-2025-2011 Public exploit EPSS 45.7% 7.5 HighMay 6, 2025
• averta master slider – responsive touch slider, master slider +1 more Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode CVE-2024-11731 6.4 MediumMarch 5, 2025
• averta master slider – responsive touch slider, master slider +1 more Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode CVE-2024-13757 6.4 MediumMarch 5, 2025
• averta master slider Master Slider < 3.10.5 - Editor+ Stored XSS CVE-2024-12173 3.5 LowFebruary 19, 2025
• averta shortcodes and extra features for phlox theme WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability CVE-2024-50500 4.3 MediumFebruary 3, 2025
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget CVE-2024-12588 6.4 MediumDecember 21, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes CVE-2024-9545 6.4 MediumDecember 21, 2024
• averta depicter slider, depicter slider and popup by averta slider +1 more WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability CVE-2022-47176 4.3 MediumDecember 13, 2024
• averta depicter — popup & slider builder Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-4633 6.4 MediumDecember 6, 2024
• averta depicter slider, depicter +1 more WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability CVE-2024-47359 5.3 MediumNovember 1, 2024
• averta depicter slider WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-47381 5.9 MediumOctober 5, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets CVE-2024-8486 6.4 MediumOctober 5, 2024
• averta premium portfolio features for phlox theme, auxinportfolio +1 more Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1384 6.4 MediumAugust 29, 2024
• averta phlox, phlox pro +1 more Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters CVE-2024-6339 6.1 MediumAugust 21, 2024
• averta add image slider, carousel slider, coupon popup +5 more +7 more Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-4389 8.8 HighAugust 14, 2024
• averta depicter slider WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-43161 5.9 MediumAugust 12, 2024
• averta master slider Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion CVE-2024-6490 6.5 MediumJuly 26, 2024
• averta depicter slider, depicter +1 more WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-37414 5.9 MediumJuly 22, 2024
• averta premium portfolio features for phlox theme, auxinportfolio +1 more Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios' CVE-2024-3587 6.4 MediumJuly 16, 2024
• averta master slider WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37222 7.1 HighJune 20, 2024
• depicter, averta depicter — popup & slider builder +1 more Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation CVE-2024-4390 6.5 MediumJune 20, 2024
• averta master slider WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-50900 4.3 MediumJune 19, 2024
• averta master slider – responsive touch slider, master slider +1 more Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode CVE-2024-4375 6.4 MediumJune 18, 2024
• averta master slider – responsive touch slider, master slider +1 more Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6382 6.4 MediumJune 1, 2024
• averta master slider – responsive touch slider, master slider +1 more Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4470 6.4 MediumMay 21, 2024
• averta phlox shop WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability CVE-2023-39163 8.6 HighMay 17, 2024
• averta phlox portfolio WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability CVE-2023-38399 8.6 HighMay 17, 2024
• averta shortcodes and extra features for phlox theme WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability CVE-2023-37888 7.6 HighMay 17, 2024
• Show olderLoading…