Shortcodes and extra features for Phlox theme

26 known CVEs 80K+ active installs

Scan My Site Free
UNKNOWN: 26
Known Vulnerabilities 26
CVE-2025-12379 UNKNOWN EPSS 0.1%
Published 2026-01-10 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a combination of the 'tag' and ‘title_tag’ parameters in all versions up to, and
CVE-2025-4776 UNKNOWN EPSS 0.1%
Published 2026-01-06 · Affected: *
The Phlox theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-caption` HTML attribute in all versions up to, and including, 2.17.7 due to insufficient input sanitization and
CVE-2025-13215 UNKNOWN EPSS 0.1%
Published 2026-01-06 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.17.13 via the auxels_ajax_search due to insufficien
CVE-2025-12582 UNKNOWN EPSS 0.1%
Published 2025-11-05 · Affected: *
The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'features_revert_option AJAX endpoint in all versions up to, and including
CVE-2024-50500 UNKNOWN EPSS 0.3%
Published 2025-02-03 · Affected: *
Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sh
CVE-2024-50500 UNKNOWN EPSS 0.3%
Published 2025-02-03 · Affected: *
Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sh
CVE-2024-50500 UNKNOWN EPSS 0.3%
Published 2025-02-03 · Affected: *
Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sh
CVE-2024-50500 UNKNOWN EPSS 0.3%
Published 2025-02-03 · Affected: *
Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sh
CVE-2024-9545 UNKNOWN EPSS 0.2%
Published 2024-12-21 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_contact_box and aux_gmaps shortcodes in all versions up to, and
CVE-2024-9545 UNKNOWN EPSS 0.2%
Published 2024-12-21 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_contact_box and aux_gmaps shortcodes in all versions up to, and
CVE-2024-12588 UNKNOWN EPSS 0.2%
Published 2024-12-21 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in all versions up to, and including, 2.17.2 due to in
CVE-2024-12588 UNKNOWN EPSS 0.2%
Published 2024-12-21 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in all versions up to, and including, 2.17.2 due to in
CVE-2024-3517 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion Widget in all versions up to, and including, 2.15.5 due to insuffi
CVE-2024-3517 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion Widget in all versions up to, and including, 2.15.5 due to insuffi
CVE-2024-3341 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_gmaps' shortcode in all versions up to, and including, 2.15.7
CVE-2024-3341 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_gmaps' shortcode in all versions up to, and including, 2.15.7
CVE-2024-1533 UNKNOWN EPSS 0.3%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in all versions up to, and including, 2.15.7 due to insufficien
CVE-2024-1533 UNKNOWN EPSS 0.3%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in all versions up to, and including, 2.15.7 due to insufficien
CVE-2024-1396 UNKNOWN EPSS 0.3%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 2.15.7 due to in
CVE-2024-1396 UNKNOWN EPSS 0.3%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 2.15.7 due to in
CVE-2024-1348 UNKNOWN EPSS 0.3%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.15.7 due to insu
CVE-2024-1348 UNKNOWN EPSS 0.3%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.15.7 due to insu
CVE-2023-7064 UNKNOWN EPSS 0.6%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.17.5 via deserialization of untrusted input from th
CVE-2023-7064 UNKNOWN EPSS 0.6%
Published 2024-05-02 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.17.5 via deserialization of untrusted input from th
CVE-2024-1357 UNKNOWN EPSS 0.3%
Published 2024-04-16 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline shortcode in all versions up to, and including, 2.15.7
CVE-2024-1357 UNKNOWN EPSS 0.3%
Published 2024-04-16 · Affected: *
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline shortcode in all versions up to, and including, 2.15.7

Is Shortcodes and extra features for Phlox theme running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free