Averta Shortcodes and extra features for Phlox theme
CVE-2025-12379Medium 6.4Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget0.2%
CVE-2025-13215Medium 5.3Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure0.3%
CVE-2025-63071Medium 5.3WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability0.3%
CVE-2024-50500Medium 4.3WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability0.4%
CVE-2024-12588Medium 6.4Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget0.3%
CVE-2024-9545Medium 6.4Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes0.3%
CVE-2024-8486Medium 6.4Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets0.4%
CVE-2023-7064High 7.5Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer0.9%
CVE-2024-3517Medium 6.4Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget0.5%
CVE-2024-1533Medium 6.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting0.4%
CVE-2024-1396Medium 6.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'0.4%
CVE-2024-3341Medium 6.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode0.5%
CVE-2024-1348Medium 6.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS0.4%
CVE-2024-1357Medium 6.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode0.4%
CVE-2024-31099Medium 6.4WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability0.4%
CVE-2023-50368Medium 6.5WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)0.4%