Plugin icon

Shortcodes and extra features for Phlox theme

auxin-elements

Vulnerabilities:

20

Last Updated:

May 9, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-01-09
Title
Shortcodes and extra features for Phlox theme < 2.17.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
Fixed in
Fixed in 2.17.14
CVSS
6.4 (medium)
Published
2026-01-05
Title
Shortcodes and extra features for Phlox theme < 2.17.14 - Unauthenticated Draft Posts Information Exposure
Fixed in
Fixed in 2.17.14
CVSS
5.3 (medium)
Published
2025-12-27
Title
Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-10-26
Title
Shortcodes and extra features for Phlox <= 2.17.12 - Unauthenticated Information Exposure
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-01-31
Title
Shortcodes and extra features for Phlox theme < 2.17.5 - Missing Authorization
Fixed in
Fixed in 2.17.5
CVSS
4.3 (medium)
Published
2024-12-20
Title
Shortcodes and extra features for Phlox theme < 2.17.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Fixed in
Fixed in 2.17.3
CVSS
6.4 (medium)
Published
2024-12-20
Title
Shortcodes and extra features for Phlox theme < 2.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
Fixed in
Fixed in 2.17.1
CVSS
6.4 (medium)
Published
2024-10-04
Title
Shortcodes and extra features for Phlox theme < 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
Fixed in
Fixed in 2.16.4
CVSS
6.4 (medium)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via title_tag
Fixed in
Fixed in 2.15.8
CVSS
5.9 (medium)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.6 - Contributor+ Stored XSS via Accordion Widget
Fixed in
Fixed in 2.15.6
CVSS
5.9 (medium)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via aux_timeline Shortcode
Fixed in
Fixed in 2.15.8
CVSS
5.9 (medium)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via aux_gmaps Shortcode
Fixed in
Fixed in 2.15.8
CVSS
5.9 (medium)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ XSS via HTML Element
Fixed in
Fixed in 2.15.8
CVSS
5.1 (medium)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.17.6 - Subscriber+ PHP Object Injection
Fixed in
Fixed in 2.17.6
CVSS
7.5 (high)
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via Custom JS
Fixed in
Fixed in 2.15.8
CVSS
5.9 (medium)
Published
2024-03-29
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Subscriber+ Template Import
Fixed in
Fixed in 2.15.8
CVSS
4.3 (medium)
Published
2023-12-06
Title
Shortcodes and extra features for Phlox theme < 2.15.5 - Contributor+ Stored XSS
Fixed in
Fixed in 2.15.5
CVSS
5.9 (medium)
Published
2023-11-15
Title
Shortcodes and extra features for Phlox theme < 2.15.0 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 2.15.0
CVSS
9.8 (critical)
Published
2022-11-17
Title
Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
Fixed in
Fixed in 2.10.7
CVSS
5.5 (medium)
Published
2022-06-20
Title
Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting
Fixed in
Fixed in 2.9.8
CVSS
6.1 (medium)