Shortcodes and extra features for Phlox theme

Güvenlik açıkları

• CVE-2023-37888kimlik doğrulamasız≤ 2.14.0

  WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability

  Kritik 9.8

• CVE-2024-50500giriş gerekir≤ 2.17.4

  WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2024-31099giriş gerekir≤ 2.15.7

  WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2023-7064abone+≤ 2.17.5

  Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer

  Yüksek 7.5

• CVE-2026-57737giriş gerekir≤ 2.17.16

  WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.16 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-12379katılımcı+≤ 2.17.13

  Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget

  Orta 6.4

• CVE-2024-9545katılımcı+≤ 2.17.0

  Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes

  Orta 5.4

• CVE-2024-12588katılımcı+≤ 2.17.2

  Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget

  Orta 5.4

• CVE-2024-8486katılımcı+≤ 2.16.3

  Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

  Orta 5.4

• CVE-2024-3517katılımcı+≤ 2.15.5

  Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget

  Orta 5.4

• CVE-2024-3341katılımcı+≤ 2.15.7

  Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode

  Orta 5.4

• CVE-2024-1533katılımcı+≤ 2.15.7

  Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-1396katılımcı+≤ 2.15.7

  Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'

  Orta 5.4

• CVE-2024-1348katılımcı+≤ 2.15.7

  Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

  Orta 5.4

• CVE-2024-1357katılımcı+≤ 2.15.7

  Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode

  Orta 5.4

• CVE-2026-74008kimlik doğrulamasız≤ 2.17.22

  WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability

  Orta 5.3

• CVE-2025-13215kimlik doğrulamasız≤ 2.17.13

  Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure

  Orta 5.3

• CVE-2025-63071kimlik doğrulamasız≤ 2.17.15

  WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability

  Orta 5.3

• CVE-2025-69016giriş gerekir≤ 2.17.15

  WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerability

  Orta 4.3