Averta Phlox vulnerabilities

• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.24 - Sensitive Data Exposure vulnerability CVE-2026-74008 5.3 MediumAugust 18, 2026
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Cross Site Scripting (XSS) vulnerability CVE-2026-57737 6.5 MediumJuly 1, 2026
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget CVE-2025-12379 6.4 MediumJanuary 10, 2026
• averta phlox Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute CVE-2025-4776 6.4 MediumJanuary 6, 2026
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure CVE-2025-13215 5.3 MediumJanuary 6, 2026
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Broken Access Control vulnerability CVE-2025-69016 4.3 MediumDecember 30, 2025
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability CVE-2025-63071 5.3 MediumDecember 9, 2025
• averta premium portfolio features for phlox theme Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path] CVE-2025-12497 8.1 HighNovember 5, 2025
• averta shortcodes and extra features for phlox theme WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability CVE-2024-50500 4.3 MediumFebruary 3, 2025
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget CVE-2024-12588 6.4 MediumDecember 21, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes CVE-2024-9545 6.4 MediumDecember 21, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets CVE-2024-8486 6.4 MediumOctober 5, 2024
• averta premium portfolio features for phlox theme, auxinportfolio +1 more Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1384 6.4 MediumAugust 29, 2024
• averta phlox, phlox pro +1 more Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters CVE-2024-6339 6.1 MediumAugust 21, 2024
• averta premium portfolio features for phlox theme, auxinportfolio +1 more Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios' CVE-2024-3587 6.4 MediumJuly 16, 2024
• averta phlox shop WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability CVE-2023-39163 8.6 HighMay 17, 2024
• averta phlox portfolio WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability CVE-2023-38399 8.6 HighMay 17, 2024
• averta shortcodes and extra features for phlox theme WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability CVE-2023-37888 7.6 HighMay 17, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer CVE-2023-7064 7.5 HighMay 2, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget CVE-2024-3517 6.4 MediumMay 2, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1533 6.4 MediumMay 2, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' CVE-2024-1396 6.4 MediumMay 2, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode CVE-2024-3341 6.4 MediumMay 2, 2024
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS CVE-2024-1348 6.4 MediumMay 2, 2024
• averta shortcodes and extra features for phlox theme, depicter slider +1 more Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode CVE-2024-1357 6.4 MediumApril 16, 2024
• averta shortcodes and extra features for phlox theme WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability CVE-2024-31099 6.4 MediumApril 1, 2024
• averta shortcodes and extra features for phlox theme WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50368 6.5 MediumDecember 14, 2023
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection CVE-2022-3359 8.8 HighDecember 12, 2022
• averta shortcodes and extra features for phlox theme Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting CVE-2022-1910 6.1 MediumJuly 11, 2022