Skip to content
Noroxi

averta records

46 published records for vendor averta.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
23.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

46 records
  • CVE-2023-37888
    39Monitor

    WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    averta · shortcodes and extra features for phlox themeMay 17, 2024

  • CVE-2024-50500
    39Monitor

    WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeFeb 3, 2025

  • CVE-2023-47507
    39Monitor

    WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    averta · master slider proDec 20, 2023

  • CVE-2024-32600
    38Monitor

    WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability

    CriticalCVSS 9.6No exploitEPSS 0%

    averta · master sliderApr 18, 2024

  • CVE-2024-4389
    35Monitor

    Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authentica

    HighCVSS 8.8No exploitEPSS 1%

    averta · depicter — popup & slider builderAug 14, 2024

  • CVE-2022-3359
    35Monitor

    Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection

    HighCVSS 8.8No exploitEPSS 1%

    averta · shortcodes and extra features for phlox themeDec 12, 2022

  • CVE-2024-31099
    35Monitor

    WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeApr 1, 2024

  • CVE-2023-39163
    34Monitor

    WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    averta · phlox shopMay 17, 2024

  • CVE-2023-7064
    30Monitor

    Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer

    HighCVSS 7.5No exploitEPSS 1%

    averta · shortcodes and extra features for phlox themeMay 2, 2024

  • CVE-2025-63045
    26Monitor

    WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    averta · master slider proDec 9, 2025

  • CVE-2024-6490
    26Monitor

    Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion

    MediumCVSS 6.5No exploitEPSS 0%

    averta · master sliderJul 26, 2024

  • CVE-2022-1910
    24Monitor

    Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    averta · shortcodes and extra features for phlox themeJul 11, 2022

  • CVE-2023-47508
    24Monitor

    WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    averta · master sliderNov 16, 2023

  • CVE-2024-6339
    24Monitor

    Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters

    MediumCVSS 6.1No exploitEPSS 0%

    averta · phloxAug 21, 2024

  • CVE-2024-37222
    24Monitor

    WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    averta · master sliderJun 20, 2024

  • CVE-2018-20368
    21Monitor

    The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings valu

    MediumCVSS 5.4No exploitEPSS 1%

    averta · master sliderDec 22, 2018

  • CVE-2024-3341
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode

    MediumCVSS 5.4No exploitEPSS 1%

    averta · shortcodes and extra features for phlox themeMay 2, 2024

  • CVE-2024-3517
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget

    MediumCVSS 5.4No exploitEPSS 1%

    averta · shortcodes and extra features for phlox themeMay 2, 2024

  • CVE-2024-1449
    21Monitor

    Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    averta · master sliderMar 2, 2024

  • CVE-2024-1396
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'

    MediumCVSS 5.4No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeMay 2, 2024

  • CVE-2024-1533
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeMay 2, 2024

  • CVE-2024-1357
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeApr 16, 2024

  • CVE-2024-1348
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

    MediumCVSS 5.4No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeMay 2, 2024

  • CVE-2024-8486
    21Monitor

    Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

    MediumCVSS 5.4No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeOct 5, 2024

  • CVE-2023-50368
    21Monitor

    WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    averta · shortcodes and extra features for phlox themeDec 14, 2023