Vulnerabilities / Shortcodes and extra features for Phlox theme
Shortcodes and extra features for Phlox theme vulnerabilities
Advisories WPSec published for Shortcodes and extra features for Phlox theme. Other sources may list more. Its attack surface: Shortcodes and extra features for Phlox theme on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0646 | Shortcodes and extra features for Phlox theme <= 2.17.22 - Missing Authorization to Authenticated (Subscriber+) Theme License Deactivation | Medium 4.3 | 2.17.24 |
| 2026-10-08 | WPSEC-2026-0645 | Shortcodes and extra features for Phlox theme <= 2.17.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes and Menu Widget Custom Content | Medium 6.4 | 2.17.24 |
License: CC BY 4.0