Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
auxin-elements
WordPress
· Plugin
23 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Shortcodes and extra features for Phlox theme <= 2.17.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-57737
auxin-elements
WordPress
Medium
Fix reported
2026-10-13
Shortcodes and extra features for Phlox <= 2.17.22 - Missing Authorization
CVE-2025-69016
auxin-elements
WordPress
Medium
Fix reported
2026-10-13
Shortcodes and extra features for Phlox theme <= 2.17.22 - Unauthenticated Information Exposure
CVE-2026-74008
auxin-elements
WordPress
Medium
No fix reported
2026-09-10
Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure
CVE-2025-63071
auxin-elements
WordPress
Medium
Fix reported
2026-07-09
Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
CVE-2025-12379
auxin-elements
WordPress
Medium
Fix reported
2026-01-10
Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure
CVE-2025-13215
auxin-elements
WordPress
Medium
Fix reported
2026-01-06
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
CVE-2023-7064
auxin-elements
WordPress
High
Fix reported
2025-10-07
Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
CVE-2024-12588
auxin-elements
WordPress
Medium
Fix reported
2025-03-07
Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
CVE-2024-9545
auxin-elements
WordPress
Medium
Fix reported
2025-03-07
Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization
CVE-2024-50500
auxin-elements
WordPress
Medium
Fix reported
2025-03-07
Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
CVE-2024-8486
auxin-elements
WordPress
Medium
Fix reported
2024-10-05
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
CVE-2024-1348
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1533
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget
CVE-2024-3517
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
CVE-2024-31099
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode
CVE-2024-1357
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
CVE-2024-1396
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
CVE-2024-3341
auxin-elements
WordPress
Medium
Fix reported
2024-08-02
Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
CVE-2023-50368
auxin-elements
WordPress
Medium
Fix reported
2024-02-08
Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
auxin-elements
WordPress
Medium
Fix reported
2024-01-22
Previous
1
2
Next