Skip to content
OpenAdvisories

Product · Averta

Shortcodes and extra features for Phlox theme

19 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer

    The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.17.5 via deserialization of untrusted input from the vulnerable 'id' parameter in the 'auxin_template_control_…