VendorsAvertashortcodes_and_extra_features_for_phlox_themeall versions
Vulnerabilities

Averta Shortcodes And Extra Features For Phlox Theme

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2023-37888
WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability
Published 2024-05-17 · Analyzed
9.8EPSS 0.007
CVE-2024-50500
WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability
Published 2025-02-03 · Modified
9.8EPSS 0.004
CVE-2022-3359
Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
Published 2022-12-12 · Modified
8.8EPSS 0.008
CVE-2024-31099
WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability
Published 2024-04-01 · Analyzed
8.8EPSS 0.004
CVE-2023-7064
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
Published 2024-05-02 · Modified
7.5EPSS 0.009
CVE-2023-50368
WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-14 · Modified
6.5EPSS 0.004
CVE-2024-3341
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
Published 2024-05-02 · Modified
6.4EPSS 0.005
CVE-2024-3517
Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget
Published 2024-05-02 · Modified
6.4EPSS 0.005
CVE-2024-1396
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
Published 2024-05-02 · Modified
6.4EPSS 0.004
CVE-2024-1348
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Published 2024-05-02 · Modified
6.4EPSS 0.004
CVE-2024-1357
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode
Published 2024-04-16 · Modified
6.4EPSS 0.004
CVE-2024-1533
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-05-02 · Modified
6.4EPSS 0.004
CVE-2024-8486
Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
Published 2024-10-05 · Analyzed
6.4EPSS 0.004
CVE-2024-9545
Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
Published 2024-12-21 · Modified
6.4EPSS 0.003
CVE-2024-12588
Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Published 2024-12-21 · Modified
6.4EPSS 0.003
CVE-2022-1910
Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting
Published 2022-07-11 · Modified
6.1EPSS 0.014