AV
Vendor
averta
87
CVEs
0
On KEV
0
New 30D
Products
MS9.6
Master Slider
averta
21 CVEs0 on KEV0 new
SA9.8
Shortcodes and extra features for Phlox theme
averta
19 CVEs0 on KEV0 new
DS9.8
Depicter Slider
averta
10 CVEs0 on KEV0 new
MS5.4
Master Slider – Responsive Touch Slider
averta
9 CVEs0 on KEV0 new
DP8.8
Depicter — Popup & Slider Builder
averta
8 CVEs0 on KEV0 new
MS9.8
Master Slider Pro
averta
3 CVEs0 on KEV0 new
PP8.1
Premium Portfolio Features for Phlox theme
averta
3 CVEs0 on KEV0 new
AU5.4
Auxinportfolio
Averta
2 CVEs0 on KEV0 new
PH6.4
Phlox
averta
2 CVEs0 on KEV0 new
AI8.8
Add Image Slider
Averta
1 CVEs0 on KEV0 new
CS8.8
Carousel Slider
Averta
1 CVEs0 on KEV0 new
CP8.8
Coupon Popup
Averta
1 CVEs0 on KEV0 new
EI8.8
Exit Intent Popup
Averta
1 CVEs0 on KEV0 new
PP8.6
Phlox Portfolio
Averta
1 CVEs0 on KEV0 new
PP6.1
Phlox PRO
averta
1 CVEs0 on KEV0 new
PS8.6
Phlox Shop
Averta
1 CVEs0 on KEV0 new
PM8.8
Popup Modal
Averta
1 CVEs0 on KEV0 new
PS8.8
Post Slider Carousel
Averta
1 CVEs0 on KEV0 new
SA8.8
Slider And Popup Builder BY Depicter
Averta
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-66622 | DS Depicter Slider averta | 7.5 | Aug 18 | WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability |
| CVE-2026-56014 | MS Master Slider Averta | 7.1 | Jun 25 | WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-48968 | MS Master Slider Averta | 6.5 | May 27 | WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68558 | DS Depicter Slider averta | 6.5 | Jan 22 | WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability |
| CVE-2025-12379 | SA Shortcodes and extra features for Phlox theme averta | 6.4 | Jan 10 | Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget |
| CVE-2025-4776 | PH Phlox averta | 6.4 | Jan 6 | Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute |
| CVE-2025-13215 | SA Shortcodes and extra features for Phlox theme averta | 5.3 | Jan 6 | Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure |
| CVE-2025-11370 | DP Depicter — Popup & Slider Builder averta | 5.3 | Jan 6 | Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates |
| CVE-2025-63071 | SA Shortcodes and extra features for Phlox theme averta | 5.3 | Dec 9 | WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability |
| CVE-2025-63045 | MS Master Slider Pro averta | 6.5 | Dec 9 | WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-12497 | PP Premium Portfolio Features for Phlox theme averta | 8.1 | Nov 5 | Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path] |
| CVE-2025-11373 | DP Depicter — Popup & Slider Builder averta | 4.3 | Nov 5 | Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload |
| CVE-2025-8383 | DP Depicter — Popup & Slider Builder averta | 4.3 | Oct 31 | Depicter <= 4.0.4 - Cross-Site Request Forgery |
| CVE-2025-58025 | MS Master Slider averta | 5.4 | Sep 22 | WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-5291 | MS Master Slider – Responsive Touch Slider averta | 5.4 | Jun 17 | Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes |
| CVE-2025-39412 | MS Master Slider averta | 4.3 | May 19 | WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability |
| CVE-2025-2011 | DP Depicter — Popup & Slider Builder averta | 7.5 | May 6 | Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter |
| CVE-2024-11731 | MS Master Slider – Responsive Touch Slider averta | 5.4 | Mar 5 | Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode |
| CVE-2024-13757 | MS Master Slider – Responsive Touch Slider averta | 5.4 | Mar 5 | Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode |
| CVE-2024-12173 | MS Master Slider Averta | 3.5 | Feb 19 | Master Slider < 3.10.5 - Editor+ Stored XSS |
| CVE-2024-50500 | SA Shortcodes and extra features for Phlox theme averta | 9.8 | Feb 3 | WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability |
| CVE-2024-12588 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | Dec 21 | Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget |
| CVE-2024-9545 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | Dec 21 | Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes |
| CVE-2022-47176 | DS Depicter Slider Averta | 4.3 | Dec 13 | WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability |
| CVE-2024-4633 | DP Depicter — Popup & Slider Builder averta | 6.4 | Dec 6 | Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting |
| CVE-2024-47359 | DS Depicter Slider averta | 9.8 | Nov 1 | WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability |
| CVE-2024-47381 | DS Depicter Slider averta | 4.8 | Oct 5 | WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-8486 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | Oct 5 | Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets |
| CVE-2024-1384 | PP Premium Portfolio Features for Phlox theme averta | 5.4 | Aug 29 | Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-6339 | PP Phlox PRO averta | 6.1 | Aug 21 | Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters |
| CVE-2024-4389 | DP Depicter — Popup & Slider Builder averta | 8.8 | Aug 14 | Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload |
| CVE-2024-43161 | DS Depicter Slider Averta | 4.8 | Aug 12 | WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-6490 | MS Master Slider Averta | 6.5 | Jul 26 | Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion |
| CVE-2024-37414 | DS Depicter Slider Averta | 5.4 | Jul 22 | WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-3587 | PP Premium Portfolio Features for Phlox theme averta | 5.4 | Jul 16 | Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios' |
| CVE-2024-37222 | MS Master Slider Averta | 6.1 | Jun 20 | WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-4390 | DP Depicter — Popup & Slider Builder averta | 6.5 | Jun 20 | Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation |
| CVE-2023-50900 | MS Master Slider Averta | 4.3 | Jun 19 | WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-4375 | MS Master Slider – Responsive Touch Slider averta | 5.4 | Jun 18 | Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode |
| CVE-2023-6382 | MS Master Slider – Responsive Touch Slider averta | 5.4 | Jun 1 | Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4470 | MS Master Slider – Responsive Touch Slider averta | 5.4 | May 21 | Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2023-39163 | PS Phlox Shop Averta | 8.6 | May 17 | WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability |
| CVE-2023-38399 | PP Phlox Portfolio Averta | 8.6 | May 17 | WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability |
| CVE-2023-37888 | SA Shortcodes And Extra Features For Phlox Theme Averta | 9.8 | May 17 | WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability |
| CVE-2023-7064 | SA Shortcodes and extra features for Phlox theme averta | 7.5 | May 2 | Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer |
| CVE-2024-3517 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget |
| CVE-2024-1533 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-1396 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' |
| CVE-2024-3341 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode |
| CVE-2024-1348 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | May 2 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS |
| CVE-2024-32600 | MS Master Slider Averta | 9.6 | Apr 18 | WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability |
| CVE-2024-32580 | MS Master Slider Averta | 5.4 | Apr 18 | WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1357 | SA Shortcodes and extra features for Phlox theme averta | 5.4 | Apr 16 | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode |
| CVE-2024-31099 | SA Shortcodes and extra features for Phlox theme Averta | 8.8 | Apr 1 | WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability |
| CVE-2023-51491 | DS Depicter Slider Averta | 8.8 | Mar 16 | WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-1449 | MS Master Slider – Responsive Touch Slider averta | 5.4 | Mar 2 | Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-0611 | MS Master Slider – Responsive Touch Slider averta | 4.8 | Mar 2 | Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback |
| CVE-2023-6326 | MS Master Slider – Responsive Touch Slider averta | 4.3 | Mar 2 | Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action |
| CVE-2023-6493 | DP Depicter — Popup & Slider Builder averta | 4.3 | Jan 5 | Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save |
| CVE-2023-47507 | MS Master Slider Pro Averta | 9.8 | Dec 20 | WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection |
