Premium Portfolio Features for Phlox theme

Premium Portfolio Features for Phlox theme has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include PHP Remote File Inclusion.

Every one of the 4 issues recorded for Premium Portfolio Features for Phlox theme has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Premium Portfolio Features for Phlox theme is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSHigh

7.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Premium Portfolio Features for Phlox theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2023-38399

Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

4 records


2025-11-04 21:46	Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path] Premium Portfolio Features for Phlox… <= 2.3.10	`CVE-2025-12497`	8.1 High	LionTree	Yes
2024-08-28 23:34	Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Premium Portfolio Features for Phlox… <= 2.3.4	`CVE-2024-1384`	6.4 Medium	Lucio Sá	Yes
2024-07-15 00:00	Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios' Premium Portfolio Features for Phlox… <= 2.3.2	`CVE-2024-3587`	6.4 Medium	wesley (wcraft)	Yes
2023-11-15 00:00	Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion Premium Portfolio Features for Phlox… <= 2.3.1	`CVE-2023-38399`	9.8 Critical	Rafie Muhammad	Yes

Showing 1–4 of 4 reports

Latestv2.3.12

Premium Portfolio Features for Phlox theme

Author

averta

4.3(7)

86/100

Last Updated

2025-11-03 (10mo ago)

Active Installs

40,000+

Downloads

1,093,980

Requires WP

4.7+

Requires PHP

5.6+

Tested up to

WP 6.8.8

Created

2017-02-25 (10y ago)

Requires Plugins

auxin-elements

Overview This plugin adds plenty of premium portfolio functionalities to Phlox theme that makes you able to showcase and present your projects in an elegant way. Demo on Phlox Theme | Documentation | Video tutorials | Support forum Features Elementor Page builder support (6 Exclusive Portfolio Elements) Portfolio in Grid Layout Portfolio in Grid Layout With Filter Options Portfolio in Masonry Layout Portfolio in Masonry Layout With Filter Options Portfolio in Tiles Layout Customizable Portfolio Archive pages Sticky Header Sticky Footer Fully Responsive Cross Browser IE9+ and Other Modern Browsers Some demo sites by Phlox theme Minimal Portfolio Modern Shop Real State The Architect Minimal Photography Journey Blog Classic Blog Portfolio Vivid Classic Portfolio Food Blog Default Coming Soon Red Coming Soon Galaxy Compatible Browsers IE9+ Firefox Safari Opera Chrome iOS browser Android browser Documentations If you have any question about working with “Phlox Portfolio”, you can take a look at online documentations Translation You can start translating this plugin from here: online translation service.

View on WordPress.org