Input validation vulnerability in Shortcodes and extra features for Phlox theme 2.15.2

The Phlox theme plugin for WordPress has a security vulnerability called PHP Object Injection, which affects all versions up to 2.15.2. This vulnerability can be exploited by uploading a malicious image file that contains a PHP Object, allowing attackers with authenticated access to the plugin to potentially delete files, access sensitive information, or run code. This vulnerability does not have a built-in protection mechanism, but if another plugin or theme with a built-in protection mechanism is installed on the website, it could prevent the attack.