Shortcodes and extra features for Phlox theme
averta
Developer
2.17.15
Latest version
90,000
Installations
No date
Last updated
Vulnerability history
2 present
17 fixed
5 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget vulnerability<= 2.17.26 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS vulnerability<= 2.15.76 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode vulnerability<= 2.15.76 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' vulnerability<= 2.15.77 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.15.77 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode vulnerability<= 2.15.77 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes vulnerability<= 2.17.07 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget vulnerability<= 2.17.137 days ago
- Unauthenticated Draft Posts Information Exposure vulnerability<= 2.17.137 days ago
- Broken Access Control vulnerability<= 2.17.15Dec 27, 2025
- Sensitive Data Exposure vulnerability<= 2.17.15Oct 26, 2025
- Broken Access Control vulnerability<= 2.17.4Jan 31, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets vulnerability<= 2.16.3Oct 7, 2024
- Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer vulnerability<= 2.17.5Apr 16, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.15.5Apr 16, 2024
- Broken Access Control vulnerability<= 2.15.7Mar 29, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.15.4Dec 7, 2023
- Unauthenticated Local File Inclusion vulnerability<= 2.14.0Nov 15, 2023
- Reflected Cross-Site-Scripting (XSS) vulnerability<= 2.9.7Jun 20, 2022