CVE-2026-74008— WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability
Quick assessment
Affected
averta Shortcodes and extra features for Phlox theme
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Phlox 主题 <= 2.17.22 版本中，简码（Shortcodes）及其他附加功能存在未认证的敏感数据泄露漏洞。
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| averta | Shortcodes and extra features for Phlox theme | n/a≤ 2.17.22 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-74008
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过发送数据的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| averta | Shortcodes and extra features for Phlox theme | n/a ~ 2.17.22 | - |
|
II. Public POCs for CVE-2026-74008
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-74008
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-74008 (1)
IV. Related Vulnerabilities
Same product: Shortcodes and extra features for Phlox theme
-
CVE-2026-57737
WordPress Shortcodes and extra features for Phlox theme plug -
CVE-2025-12379
Shortcodes and extra features for Phlox theme <= 2.17.13 - A -
CVE-2025-13215
Shortcodes and extra features for Phlox theme <= 2.17.13 - U -
CVE-2025-69016
WordPress Shortcodes and extra features for Phlox theme plug -
CVE-2025-63071
WordPress Shortcodes and extra features for Phlox theme plug
Same vendor: averta
-
CVE-2026-66622
WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vu -
CVE-2026-56014
WordPress Master Slider plugin <= 3.11.2 - Cross Site Script -
CVE-2026-48968
WordPress Master Slider plugin <= 3.10.8 - Cross Site Script -
CVE-2025-68558
WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Co -
CVE-2025-12379
Shortcodes and extra features for Phlox theme <= 2.17.13 - A
Same weakness: CWE-201
-
CVE-2026-66585
WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Expos -
CVE-2026-59809
SiYuan before v3.8.0 Secret Exfiltration via http_request UR -
CVE-2026-63481
Hurl: Cookies in Cookies section leak when redirecting to a -
CVE-2026-75953
Joomla Extension - cmsjunkie.com - Open mail relay in J-Bus -
CVE-2026-73386
WordPress Track Geolocation Of Users Using Contact Form 7 pl
V. Comments for CVE-2026-74008
No comments yet