Browse CVEs

MEDIUM 6.5 CVE-2025-63045 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider Pro masterslider allows DO… Master Slider Pro 3.7.12+ Fix from $1,6002025-12-09 MEDIUM 5.4 CVE-2025-58025 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider master-slider allows Store… Master Slider after 3.11.0 Fix from $1,6002025-09-22 MEDIUM 5.4 CVE-2025-5291 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's masterslider_pb and ms… Master Slider 3.10.9+ Fix from $1,6002025-06-17 MEDIUM 5.4 CVE-2024-13757 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_layer shortcode in … Master Slider after 3.10.6 Fix from $1,6002025-03-05 MEDIUM 5.4 CVE-2024-11731 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slider shortcode in… Master Slider 3.10.7+ Fix from $1,6002025-03-05 CRITICAL 9.8 CVE-2024-50500 Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured A… Shortcodes And Extra Features For Phlox Theme 2.17.3+ Fix from $2,3002025-02-03 MEDIUM 5.4 CVE-2024-12588 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in … Shortcodes And Extra Features For Phlox Theme 2.17.3+ Fix from $1,6002024-12-21 MEDIUM 5.4 CVE-2024-9545 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_contact_box … Shortcodes And Extra Features For Phlox Theme 2.17.1+ Fix from $1,6002024-12-21 MEDIUM 5.4 CVE-2024-8486 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Mo… Shortcodes And Extra Features For Phlox Theme 2.16.4+ Fix from $1,6002024-10-05 MEDIUM 5.4 CVE-2024-1384 The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_recent_portfol… Auxinportfolio after 2.3.3 Fix from $1,6002024-08-29 MEDIUM 6.1 CVE-2024-6339 The Phlox PRO theme for WordPress is vulnerable to Reflected Cross-Site Scripting via search parameters in all versions up to, and including, 5.16.4 … Phlox 5.16.5+ Fix from $1,6002024-08-21 MEDIUM 6.5 CVE-2024-6490 During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate… Master Slider 3.10.0+ Fix from $1,6002024-07-26 MEDIUM 5.4 CVE-2024-3587 The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Portfolios Wid… Auxinportfolio 2.3.3+ Fix from $1,6002024-07-16 MEDIUM 6.1 CVE-2024-37222 Cross Site Scripting (XSS) vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0. Master Slider 3.10.5+ Fix from $1,6002024-06-20 MEDIUM 5.4 CVE-2024-4375 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_layer' shortcode i… Master Slider after 3.9.10 Fix from $1,6002024-06-18 MEDIUM 5.4 CVE-2023-6382 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_slide' shortcode i… Master Slider 3.9.10+ Fix from $1,6002024-06-01 MEDIUM 5.4 CVE-2024-4470 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_slide_info' shortc… Master Slider 3.9.10+ Fix from $1,6002024-05-21 CRITICAL 9.8 CVE-2023-37888 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox the… Shortcodes And Extra Features For Phlox Theme 2.15.0+ Fix from $2,3002024-05-17 MEDIUM 5.4 CVE-2024-3517 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion Widget in all v… Shortcodes And Extra Features For Phlox Theme 2.15.6+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-3341 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_gmaps' shor… Shortcodes And Extra Features For Phlox Theme 2.15.8+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-1533 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in all versi… Shortcodes And Extra Features For Phlox Theme 2.15.8+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-1348 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in al… Shortcodes And Extra Features For Phlox Theme 2.15.6+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-1396 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in … Shortcodes And Extra Features For Phlox Theme 2.15.8+ Fix from $1,6002024-05-02 HIGH 7.5 CVE-2023-7064 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.… Shortcodes And Extra Features For Phlox Theme 2.17.6+ Fix from $1,9502024-05-02 CRITICAL 9.6 CVE-2024-32600 Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5. Master Slider 3.9.7+ Fix from $2,3002024-04-18 MEDIUM 5.4 CVE-2024-32580 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows Stored XSS.This iss… Master Slider 3.9.9+ Fix from $1,6002024-04-18 MEDIUM 5.4 CVE-2024-1357 The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline sho… Shortcodes And Extra Features For Phlox Theme 2.15.8+ Fix from $1,6002024-04-16 HIGH 8.8 CVE-2024-31099 Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra fe… Shortcodes And Extra Features For Phlox Theme 2.15.8+ Fix from $1,9502024-04-01 MEDIUM 5.4 CVE-2024-1449 The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slide shortcode in … Master Slider 3.9.10+ Fix from $1,6002024-03-02 CRITICAL 9.8 CVE-2023-47507 Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro: from n/a through 3.6.5. Master Slider Pro after 3.6.5 Fix from $2,3002023-12-20