Medium
CVE-2026-74008
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
Medium
CVE-2026-57737
Shortcodes and extra features for Phlox theme <= 2.17.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-12379
Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
Medium
CVE-2025-13215
Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure
Medium
CVE-2025-69016
Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization
Medium
CVE-2025-63071
Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure
Medium
CVE-2024-50500
Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization
Medium
CVE-2024-12588
Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Medium
CVE-2024-9545
Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
Medium
CVE-2024-8486
Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
Medium
CVE-2024-1357
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode
High
CVE-2023-7064
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
Medium
CVE-2024-3517
Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget
Medium
CVE-2024-1533
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1396
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
Medium
CVE-2024-3341
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
Medium
CVE-2024-1348
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Medium
CVE-2024-31099
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
Medium
CVE-2023-50368
Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2023-37888
Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion
High
CVE-2022-3359
Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection
Medium
85551ba1-6d6e-47a0-864f-f9d0a0a11056
Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-1910
Shortcodes and extra features for Phlox theme <= 2.9.7 - Reflected Cross-Site-Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.