Skip to content
Noroxi

Shortcodes and extra features for Phlox theme

auxin-elements · plugin

Known security vulnerabilities for Shortcodes and extra features for Phlox theme. Find out in seconds which version runs on your site with WP Lens.

19 known vulnerabilities

2 critical · latest Aug 18, 2026

Vulnerabilities

  • CVE-2024-50500

    WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

    Critical 9.8

  • CVE-2023-37888

    WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability

    Critical 9.8

  • CVE-2024-31099

    WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability

    High 8.8

  • CVE-2023-7064

    Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer

    High 7.5

  • CVE-2026-57737

    WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.16 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-12379

    Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget

    Medium 6.4

  • CVE-2024-9545

    Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes

    Medium 5.4

  • CVE-2024-12588

    Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget

    Medium 5.4

  • CVE-2024-8486

    Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

    Medium 5.4

  • CVE-2024-3517

    Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget

    Medium 5.4

  • CVE-2024-3341

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode

    Medium 5.4

  • CVE-2024-1533

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1396

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'

    Medium 5.4

  • CVE-2024-1348

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

    Medium 5.4

  • CVE-2024-1357

    Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode

    Medium 5.4

  • CVE-2026-74008

    WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability

    Medium 5.3

  • CVE-2025-13215

    Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure

    Medium 5.3

  • CVE-2025-63071

    WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability

    Medium 5.3

  • CVE-2025-69016

    WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory