Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Shortcodes and extra features for Phlox theme — Vulnerabilities & Security Advisories 22

All 22 CVE vulnerabilities found in Shortcodes and extra features for Phlox theme, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the "Shortcodes and extra features for Phlox theme" WordPress plugin, classified under the weakness type of Cross-Site Scripting (XSS). The collection documents all disclosed security issues for this specific product, covering advisories published since the plugin's initial release through the present day. Readers can use this aggregation to track the vendor's advisory history, understand the prevalence of client-side injection flaws in this codebase, and review the complete vulnerability timeline for impact assessment. The entries are organized chronologically and include severity ratings, affected version ranges, and remediation details. This resource serves security teams and site administrators who need to verify patch status, compare this theme's security posture against other Phlox-family products, and prioritize upgrades based on the severity of unpatched flaws. No specific CVE identifiers are listed in this introductory text, but each entry on the full page links to the corresponding advisory. The data is sourced from official security advisories and independent vulnerability databases. This page is intended for technical stakeholders managing WordPress installations that rely on the Phlox theme ecosystem. It provides a consolidated view to support audit workflows and risk management decisions.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-74008 WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability CWE-201 5.3 Medium 2026-08-18
CVE-2026-57737 WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.16 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-07-01
CVE-2025-12379 Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget CWE-79 6.4 Medium 2026-01-10
CVE-2025-13215 Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure CWE-200 5.3 Medium 2026-01-06
CVE-2025-69016 WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-12-30
CVE-2025-63071 WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability CWE-201 5.3 Medium 2025-12-09
CVE-2024-50500 WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-02-03
CVE-2024-12588 Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget CWE-79 6.4 Medium 2024-12-21
CVE-2024-9545 Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes CWE-79 6.4 Medium 2024-12-21
CVE-2024-8486 Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets CWE-79 6.4 Medium 2024-10-05
CVE-2023-37888 WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability CWE-22 7.6 High 2024-05-17
CVE-2023-7064 Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer CWE-502 7.5 High 2024-05-02
CVE-2024-3517 Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget CWE-79 6.4 Medium 2024-05-02
CVE-2024-1533 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-05-02
CVE-2024-1396 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' CWE-79 6.4 Medium 2024-05-02
CVE-2024-3341 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode CWE-79 6.4 Medium 2024-05-02
CVE-2024-1348 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS CWE-79 6.4 Medium 2024-05-02
CVE-2024-1357 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode CWE-79 6.4 Medium 2024-04-16
CVE-2024-31099 WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability CWE-862 6.4 Medium 2024-04-01
CVE-2023-50368 WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium 2023-12-14
CVE-2022-3359 Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection 8.8 - 2022-12-12
CVE-2022-1910 Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting CWE-79 6.1 - 2022-07-11

All 22 known CVE vulnerabilities affecting Shortcodes and extra features for Phlox theme with full Chinese analysis, references, and POCs where available.