CVE-2026-74008: WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability
Published Aug 18, 2026
·Updated
Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.
Affected Software
0 affected components
Event History
Aug 18, 2026
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed?
Sites running Shortcodes and extra features for Phlox theme version 2.17.22 or earlier are affected. The issue is remotely reachable and requires no authentication or user interaction.
2
What does an attacker need to exploit this issue?
An attacker can exploit the issue over the network with low attack complexity and without any privileges. The documented impact is disclosure of sensitive information; no integrity or availability impact is indicated.