Log in Start free

Averta

Products

ProductCVEsExploitedLatest
Shortcodes and extra features for Phlox theme16–Jan 10, 2026
Master Slider – Responsive Touch Slider9–Jun 17, 2025
Depicter — Popup & Slider Builder8–Jan 6, 2026
Master Slider8–Jun 25, 2026
Depicter Slider7–Aug 18, 2026
Premium Portfolio Features for Phlox theme3–Nov 5, 2025
Master Slider Pro2–Dec 9, 2025
Phlox Shop1–May 17, 2024
Phlox PRO1–Aug 21, 2024
Phlox1–Jan 6, 2026
Phlox Portfolio1–May 17, 2024

Exploited and recent CVEs

  • CVE-2026-66622 High 7.5 WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability 0.3%
  • CVE-2026-56014 High 7.1 WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-48968 Medium 6.5 WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68558 Medium 6.5 WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-12379 Medium 6.4 Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget 0.2%
  • CVE-2025-4776 Medium 6.4 Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute 0.2%
  • CVE-2025-13215 Medium 5.3 Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure 0.3%
  • CVE-2025-11370 Medium 5.3 Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates 0.3%
  • CVE-2025-63071 Medium 5.3 WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-63045 Medium 6.5 WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-12497 High 8.1 Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path] 0.6%
  • CVE-2025-11373 Medium 4.3 Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload 0.2%
  • CVE-2025-8383 Medium 4.3 Depicter <= 4.0.4 - Cross-Site Request Forgery 0.2%
  • CVE-2025-58025 Medium 6.5 WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-5291 Medium 6.4 Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes 0.3%
  • CVE-2025-39412 Medium 4.3 WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-2011 High 7.5 Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter 46.3%
  • CVE-2024-11731 Medium 6.4 Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode 0.3%
  • CVE-2024-13757 Medium 6.4 Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode 0.3%
  • CVE-2024-50500 Medium 4.3 WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability 0.4%
  • CVE-2024-12588 Medium 6.4 Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget 0.3%
  • CVE-2024-9545 Medium 6.4 Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes 0.3%
  • CVE-2024-4633 Medium 6.4 Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-47359 Medium 5.3 WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability 0.3%
  • CVE-2024-47381 Medium 5.9 WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-8486 Medium 6.4 Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets 0.4%
  • CVE-2024-1384 Medium 6.4 Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-6339 Medium 6.1 Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters 0.4%
  • CVE-2024-4389 High 8.8 Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload 1.0%
  • CVE-2024-43161 Medium 5.9 WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability 0.3%