Vulnerability index

Browse CVEs

35 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Master Slider Pro MEDIUM 6.5
CVE-2025-63045

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider Pro masterslider allows DO…

Fix: 3.7.12+
Fix from $1,600 2025-12-09
Master Slider MEDIUM 5.4
CVE-2025-58025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider master-slider allows Store…

Fix: after 3.11.0
Fix from $1,600 2025-09-22
Master Slider MEDIUM 5.4
CVE-2025-5291

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's masterslider_pb and ms…

Fix: 3.10.9+
Fix from $1,600 2025-06-17
Master Slider MEDIUM 5.4
CVE-2024-13757

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_layer shortcode in …

Fix: after 3.10.6
Fix from $1,600 2025-03-05
Master Slider MEDIUM 5.4
CVE-2024-11731

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slider shortcode in…

Fix: 3.10.7+
Fix from $1,600 2025-03-05
Shortcodes And Extra Features For Phlox Theme CRITICAL 9.8
CVE-2024-50500

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured A…

Fix: 2.17.3+
Fix from $2,300 2025-02-03
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-12588

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in …

Fix: 2.17.3+
Fix from $1,600 2024-12-21
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-9545

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_contact_box …

Fix: 2.17.1+
Fix from $1,600 2024-12-21
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-8486

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Mo…

Fix: 2.16.4+
Fix from $1,600 2024-10-05
Auxinportfolio MEDIUM 5.4
CVE-2024-1384

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_recent_portfol…

Fix: after 2.3.3
Fix from $1,600 2024-08-29
Phlox MEDIUM 6.1
CVE-2024-6339

The Phlox PRO theme for WordPress is vulnerable to Reflected Cross-Site Scripting via search parameters in all versions up to, and including, 5.16.4 …

Fix: 5.16.5+
Fix from $1,600 2024-08-21
Master Slider MEDIUM 6.5
CVE-2024-6490

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate…

Fix: 3.10.0+
Fix from $1,600 2024-07-26
Auxinportfolio MEDIUM 5.4
CVE-2024-3587

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Portfolios Wid…

Fix: 2.3.3+
Fix from $1,600 2024-07-16
Master Slider MEDIUM 6.1
CVE-2024-37222

Cross Site Scripting (XSS) vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0.

Fix: 3.10.5+
Fix from $1,600 2024-06-20
Master Slider MEDIUM 5.4
CVE-2024-4375

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_layer' shortcode i…

Fix: after 3.9.10
Fix from $1,600 2024-06-18
Master Slider MEDIUM 5.4
CVE-2023-6382

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_slide' shortcode i…

Fix: 3.9.10+
Fix from $1,600 2024-06-01
Master Slider MEDIUM 5.4
CVE-2024-4470

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_slide_info' shortc…

Fix: 3.9.10+
Fix from $1,600 2024-05-21
Shortcodes And Extra Features For Phlox Theme CRITICAL 9.8
CVE-2023-37888

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox the…

Fix: 2.15.0+
Fix from $2,300 2024-05-17
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-3517

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion Widget in all v…

Fix: 2.15.6+
Fix from $1,600 2024-05-02
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-3341

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_gmaps' shor…

Fix: 2.15.8+
Fix from $1,600 2024-05-02
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-1533

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in all versi…

Fix: 2.15.8+
Fix from $1,600 2024-05-02
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-1348

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in al…

Fix: 2.15.6+
Fix from $1,600 2024-05-02
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-1396

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in …

Fix: 2.15.8+
Fix from $1,600 2024-05-02
Shortcodes And Extra Features For Phlox Theme HIGH 7.5
CVE-2023-7064

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.…

Fix: 2.17.6+
Fix from $1,950 2024-05-02
Master Slider CRITICAL 9.6
CVE-2024-32600

Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5.

Fix: 3.9.7+
Fix from $2,300 2024-04-18
Master Slider MEDIUM 5.4
CVE-2024-32580

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows Stored XSS.This iss…

Fix: 3.9.9+
Fix from $1,600 2024-04-18
Shortcodes And Extra Features For Phlox Theme MEDIUM 5.4
CVE-2024-1357

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline sho…

Fix: 2.15.8+
Fix from $1,600 2024-04-16
Shortcodes And Extra Features For Phlox Theme HIGH 8.8
CVE-2024-31099

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra fe…

Fix: 2.15.8+
Fix from $1,950 2024-04-01
Master Slider MEDIUM 5.4
CVE-2024-1449

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slide shortcode in …

Fix: 3.9.10+
Fix from $1,600 2024-03-02
Master Slider Pro CRITICAL 9.8
CVE-2023-47507

Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro: from n/a through 3.6.5.

Fix: after 3.6.5
Fix from $2,300 2023-12-20