Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Shortcodes and extra features for Phlox theme 2.9.8

  • Severity: medium-risk
  • Status: Open
  • Publication: July 12, 2022

The Phlox theme plugin for WordPress has a vulnerability in versions up to, and including, 2.9.8 which could allow attackers with certain permissions to inject malicious web scripts into pages on your website. These scripts would then run whenever someone visits the injected page, potentially exposing visitors to malicious activity. To protect yourself from this vulnerability, please update the plugin to the latest version as soon as possible.

Detected in:

Shortcodes and extra features for Phlox theme open vulnerable versions: >= * <= 2.9.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.