Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AvertaShortcodes And Extra Features For Phlox Theme

16 matches found

CVE
CVE•added 2024/05/17 7:15 a.m.•130 views

CVE-2023-37888

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox theme allows PHP Local File Inclusion.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.14.0.

9.8CVSS6.8AI score0.00477EPSS
CVE
CVE•added 2022/07/11 1:15 p.m.•65 views

CVE-2022-1910

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting

6.1CVSS6.1AI score0.03381EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•59 views

CVE-2023-7064

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.15.2 via deserialization of untrusted input from the vulnerable 'id' parameter in the 'auxin_template_control_importer' function. This makes it possib...

7.5CVSS7AI score0.00591EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•56 views

CVE-2024-1396

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke...

6.4CVSS5.7AI score0.00114EPSS
CVE
CVE•added 2024/04/16 10:15 a.m.•55 views

CVE-2024-1357

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline shortcode in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping on user supplied attributes such as thu...

6.4CVSS5.7AI score0.00109EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•54 views

CVE-2024-1533

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with ...

6.4CVSS5.7AI score0.0013EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•53 views

CVE-2024-3517

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion Widget in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, w...

6.4CVSS5.7AI score0.0013EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•52 views

CVE-2024-3341

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_gmaps' shortcode in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS5.7AI score0.00167EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•48 views

CVE-2024-1348

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.8AI score0.00124EPSS
CVE
CVE•added 2024/04/01 2:15 p.m.•48 views

CVE-2024-31099

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7.

8.8CVSS6.8AI score0.00118EPSS
CVE
CVE•added 2022/12/12 6:15 p.m.•47 views

CVE-2022-3359

The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported file, which could lead to PHP object injection when a user imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

8.8CVSS9AI score0.00343EPSS
CVE
CVE•added 2024/10/05 8:15 a.m.•42 views

CVE-2024-8486

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions up to, and including, 2.16.3 due to insufficient input sanitization and output escaping. This makes ...

6.4CVSS6AI score0.00093EPSS
CVE
CVE•added 2025/02/03 3:15 p.m.•41 views

CVE-2024-50500

Missing Authorization vulnerability in By Averta Shortcodes and extra features for Phlox theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.17.2.

9.8CVSS4.8AI score0.00059EPSS
CVE
CVE•added 2024/12/21 9:15 a.m.•39 views

CVE-2024-12588

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in all versions up to, and including, 2.16.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

6.4CVSS5.8AI score0.00028EPSS
CVE
CVE•added 2024/12/21 9:15 a.m.•38 views

CVE-2024-9545

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_contact_box and aux_gmaps shortcodes in all versions up to, and including, 2.16.4 due to insufficient input sanitization and output escaping on user supplied attr...

6.4CVSS5.8AI score0.00034EPSS
CVE
CVE•added 2023/12/14 2:15 p.m.•27 views

CVE-2023-50368

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Shortcodes and extra features for Phlox theme allows Stored XSS.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.2.

6.5CVSS6AI score0.00181EPSS