SecAlerts
p

phlox

Security Risk Profile

65
/100
high

Security Risk Score

Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 16, 2024 to present

11
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
65/100
high

Severity Distribution

Critical
0
High
2
Medium
9
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
4

Age Distribution

Common Weaknesses (CWE)

1
XSS
9

Most Affected Products

1. averta Shortcodes And Extra Features For Phlox Theme Wordpress10
2. Phlox Phlox theme plugin for WordPress4
3. Phlox Phlox theme2
4. Phlox Shortcodes and extra features for Phlox theme plugin2
5. Phlox Premium Portfolio Features for Phlox theme1

Recent Vulnerabilities

See more →
CVE-2025-12497
CVSS 8.1high

Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]

11/5/2025🔧 No Patch
CVE-2024-12588
CVSS 6.4medium

Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget

12/21/2024🔧 No Patch
CVE-2024-9545
CVSS 6.4EPSS 0%medium

Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes

12/21/2024🔧 No Patch
CVE-2024-8486
CVSS 6.4EPSS 0%medium

Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

10/5/2024
CVE-2023-7064
CVSS 7.5high

Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer

5/2/2024🔧 No Patch
CVE-2024-3517
CVSS 6.4EPSS 0%medium

Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget

5/2/2024🔧 No Patch
CVE-2024-1533
CVSS 6.4medium

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

5/2/2024🔧 No Patch
CVE-2024-1396
CVSS 6.4medium

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'

5/2/2024
CVE-2024-3341
CVSS 6.4EPSS 0%medium

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode

5/2/2024🔧 No Patch
CVE-2024-1348
CVSS 6.4medium

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

5/2/2024🔧 No Patch

Monitor phlox in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.