SA
Product
Shortcodes and extra features for Phlox theme
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 14Low 0
Watch
Add Shortcodes and extra features for Phlox theme to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50500 | 9.8 | Feb 3 | WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability Affected: through 2.17.4 |
| CVE-2023-37888 | 9.8 | May 17 | WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability Affected: before 2.15.0 |
| CVE-2024-31099 | 8.8 | Apr 1 | WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability Affected: through 2.15.7 |
| CVE-2022-3359 | 8.8 | Dec 12 | Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection Affected: before 2.10.7 |
| CVE-2023-7064 | 7.5 | May 2 | Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer Affected: through 2.17.5 |
| CVE-2025-12379 | 6.4 | Jan 10 | Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget Affected: through 2.17.13 |
| CVE-2022-1910 | 6.1 | Jul 11 | Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting Affected: before 2.9.8 |
| CVE-2024-12588 | 5.4 | Dec 21 | Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget Affected: through 2.17.2 |
| CVE-2024-9545 | 5.4 | Dec 21 | Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes Affected: through 2.17.0 |
| CVE-2024-8486 | 5.4 | Oct 5 | Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets Affected: through 2.16.3 |
| CVE-2024-3517 | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget Affected: through 2.15.5 |
| CVE-2024-1533 | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.15.7 |
| CVE-2024-1396 | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Affected: through 2.15.7 |
| CVE-2024-3341 | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode Affected: through 2.15.7 |
| CVE-2024-1348 | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS Affected: through 2.15.7 |
| CVE-2024-1357 | 5.4 | Apr 16 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode Affected: through 2.15.7 |
| CVE-2023-50368 | 5.4 | Dec 14 | WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS) Affected: through 2.15.2 |
| CVE-2025-13215 | 5.3 | Jan 6 | Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure Affected: through 2.17.13 |
| CVE-2025-63071 | 5.3 | Dec 9 | WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability Affected: through 2.17.15 |
Showing 19