Averta vulnerabilities
60 CVEs and advisories name Averta as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-74008WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.24 - Sensitive Data Exposure vulnerability
- CVE-2026-66622WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability
- CVE-2026-57737WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-56014WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-48968WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-68558WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability
- CVE-2025-12379Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
- CVE-2025-4776Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute
- CVE-2025-13215Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure
- CVE-2025-11370Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates
- CVE-2025-69016WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Broken Access Control vulnerability
- CVE-2025-63071WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability
- CVE-2025-63045WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-12497Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
- CVE-2025-11373Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload
- CVE-2025-8383Depicter <= 4.0.4 - Cross-Site Request Forgery
- CVE-2025-58025WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-5291Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
- CVE-2025-39412WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability
- CVE-2025-2011Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
- CVE-2024-11731Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
- CVE-2024-13757Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
- CVE-2024-50500WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability
- CVE-2024-12588Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
- CVE-2024-9545Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
- CVE-2024-4633Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2024-47359WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability
- CVE-2024-47381WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-8486Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
- CVE-2024-1384Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting