Shortcodes and extra features for Phlox theme

Explore Shortcodes and extra features for Phlox theme vulnerabilities across all versions. Currently tracking 22 known vulnerabilities, including severity, impact, and patch status.

01234567891030.08.2016Today20.06.20225.4Shortcodes and extra features for Phlox theme <= 2.9.7 - Reflected Cross-Site-Scripting CVSS 5.4 · 20.06.202212.07.20226.4Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 12.07.202217.11.20227.2Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection CVSS 7.2 · 17.11.202215.11.20239.8Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion CVSS 9.8 · 15.11.202306.12.20236.4Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 06.12.202329.03.20244.3Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization CVSS 4.3 · 29.03.202415.04.20246.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode CVSS 6.4 · 15.04.20247.5Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer CVSS 7.5 · 15.04.20246.4Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget CVSS 6.4 · 15.04.20246.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 15.04.20246.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' CVSS 6.4 · 15.04.20246.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode CVSS 6.4 · 15.04.20246.4Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS CVSS 6.4 · 15.04.202404.10.20246.4Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets CVSS 6.4 · 04.10.202420.12.20246.4Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget CVSS 6.4 · 20.12.20246.4Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes CVSS 6.4 · 20.12.202431.01.20254.3Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization CVSS 4.3 · 31.01.202526.10.20255.3Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure CVSS 5.3 · 26.10.202527.12.20254.3Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization CVSS 4.3 · 27.12.202505.01.20265.3Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure CVSS 5.3 · 05.01.202609.01.20266.4Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget CVSS 6.4 · 09.01.202601.07.20266.4Shortcodes and extra features for Phlox theme <= 2.17.21 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 01.07.2026

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage91%
Open

2

Fixed

20

Get automatic notifications for all Shortcodes and extra features for Phlox theme vulnerabilities before they are exploited.

Vulnerability Records

22 records
2026-07-01 00:00CVE-2026-57737
6.4
Medium
timomangcutNo
2026-01-09 00:00CVE-2025-12379
6.4
Medium
Abu Hurayra (HurayraIIT)Yes
2026-01-05 17:46CVE-2025-13215
5.3
Medium
Nguyen CYes
2025-12-27 00:00CVE-2025-69016
4.3
Medium
Legion HunterNo
2025-10-26 00:00CVE-2025-63071
5.3
Medium
Bao - BlueRockYes
2025-01-31 00:00CVE-2024-50500
4.3
Medium
Rafie MuhammadYes
2024-12-20 20:19CVE-2024-12588
6.4
Medium
zer0gh0stYes
2024-12-20 20:19CVE-2024-9545
6.4
Medium
David Gallagher (BatFeats)Yes
2024-10-04 00:00CVE-2024-8486
6.4
Medium
WebbernautYes
2024-04-15 00:00CVE-2024-1357
6.4
Medium
Ngô Thiên An (ancorn_)Yes
Showing 1–10 of 22 reports
Shortcodes and extra features for Phlox theme banner
Latestv2.17.21

Shortcodes and extra features for Phlox theme

averta

Author

averta

2.1(7)
42/100
Last Updated
2026-07-06 (24d ago)
Active Installs
90,000+
Downloads
3,391,630
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2016-08-30 (10y ago)

Overview This plugin adds plenty of premium functionalities to Phlox theme, such as one-click demo importer, plugin manager, new shortcodes, widgets, page builder elements as well as extra theme options to extend the functionality of that theme. Demo on Phlox Theme | Documentation | Video tutorials | Support forum Features Elementor Page builder support (27 Exclusive Elements) Page builder Elements 31 Exclusive Shortcodes Auxin Widgets Login page customization Custom CSS and Javascript fields Header layout and image customization Mega Menu Fullscreen Menu Menu Skins Various Blog Page templates Sticky Header Sticky Footer Fully Responsive Cross Browser IE8+ and Other Modern Browsers Some demo sites by Phlox theme Minimal Portfolio Modern Shop Real State The Architect Minimal Photography Journey Blog Classic Blog Portfolio Vivid Classic Portfolio Food Blog Default Coming Soon Red Coming Soon Galaxy Compatible Browsers IE9+ Firefox Safari Opera Chrome iOS browser Android browser Documentations If you have any question about working with “Phlox Core Elements”, you can take a look at online documentations Translation You can start translating this plugin from here: online translation service.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C