# cve.now: Averta

The newest entries naming Averta as an affected vendor (up to 200), of 60 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-74008](https://cve.now/CVE-2026-74008.md): WordPress Shortcodes and extra features for Phlox theme plugin \<= 2.17.24 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- [CVE-2026-66622](https://cve.now/CVE-2026-66622.md): WordPress Depicter Slider plugin \<= 4.8.0 - SQL Injection vulnerability (CVSS 7.5)
- [CVE-2026-57737](https://cve.now/CVE-2026-57737.md): WordPress Shortcodes and extra features for Phlox theme plugin \<= 2.17.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-56014](https://cve.now/CVE-2026-56014.md): WordPress Master Slider plugin \<= 3.11.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-48968](https://cve.now/CVE-2026-48968.md): WordPress Master Slider plugin \<= 3.10.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-68558](https://cve.now/CVE-2025-68558.md): WordPress Depicter Slider plugin \<= 4.0.4 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-12379](https://cve.now/CVE-2025-12379.md): Shortcodes and extra features for Phlox theme \<= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget (CVSS 6.4)
- [CVE-2025-4776](https://cve.now/CVE-2025-4776.md): Phlox \<= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`data-caption\` HTML Attribute (CVSS 6.4)
- [CVE-2025-13215](https://cve.now/CVE-2025-13215.md): Shortcodes and extra features for Phlox theme \<= 2.17.13 - Unauthenticated Draft Posts Information Exposure (CVSS 5.3)
- [CVE-2025-11370](https://cve.now/CVE-2025-11370.md): Depicter \<= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates (CVSS 5.3)
- [CVE-2025-69016](https://cve.now/CVE-2025-69016.md): WordPress Shortcodes and extra features for Phlox theme plugin \<= 2.17.22 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-63071](https://cve.now/CVE-2025-63071.md): WordPress Shortcodes and extra features for Phlox theme plugin \<= 2.17.15 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- [CVE-2025-63045](https://cve.now/CVE-2025-63045.md): WordPress Master Slider Pro plugin \<= 3.7.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-12497](https://cve.now/CVE-2025-12497.md): Premium Portfolio Features for Phlox theme \<= 2.3.10 - Unauthenticated Local File Inclusion via args\[extra\_template\_path\] (CVSS 8.1)
- [CVE-2025-11373](https://cve.now/CVE-2025-11373.md): Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel \<= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload (CVSS 4.3)
- [CVE-2025-8383](https://cve.now/CVE-2025-8383.md): Depicter \<= 4.0.4 - Cross-Site Request Forgery (CVSS 4.3)
- [CVE-2025-58025](https://cve.now/CVE-2025-58025.md): WordPress Master Slider Plugin \<= 3.11.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-5291](https://cve.now/CVE-2025-5291.md): Master Slider \<= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider\_pb and ms\_slide Shortcodes (CVSS 6.4)
- [CVE-2025-39412](https://cve.now/CVE-2025-39412.md): WordPress Master Slider plugin \<= 3.11.0 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-2011](https://cve.now/CVE-2025-2011.md): Slider & Popup Builder by Depicter \<= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter (CVSS 7.5)
- [CVE-2024-11731](https://cve.now/CVE-2024-11731.md): Master Slider – Responsive Touch Slider \<= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms\_slider Shortcode (CVSS 6.4)
- [CVE-2024-13757](https://cve.now/CVE-2024-13757.md): Master Slider – Responsive Touch Slider \<= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms\_layer Shortcode (CVSS 6.4)
- [CVE-2024-50500](https://cve.now/CVE-2024-50500.md): WordPress Phlox Core Elements plugin \<= 2.17.4 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-12588](https://cve.now/CVE-2024-12588.md): Shortcodes and extra features for Phlox theme \<= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget (CVSS 6.4)
- [CVE-2024-9545](https://cve.now/CVE-2024-9545.md): Shortcodes and extra features for Phlox theme \<= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux\_contact\_box and aux\_gmaps Shortcodes (CVSS 6.4)
- [CVE-2024-4633](https://cve.now/CVE-2024-4633.md): Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel \<= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-47359](https://cve.now/CVE-2024-47359.md): WordPress Depicter plugin \<= 3.2.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-47381](https://cve.now/CVE-2024-47381.md): WordPress Slider & Popup Builder by Depicter plugin \<= 3.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-8486](https://cve.now/CVE-2024-8486.md): Shortcodes and extra features for Phlox theme \<= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets (CVSS 6.4)
- [CVE-2024-1384](https://cve.now/CVE-2024-1384.md): Premium Portfolio Features for Phlox theme \<= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-6339](https://cve.now/CVE-2024-6339.md): Phlox PRO \<= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters (CVSS 6.1)
- [CVE-2024-4389](https://cve.now/CVE-2024-4389.md): Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel \<= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-43161](https://cve.now/CVE-2024-43161.md): WordPress Slider & Popup Builder by Depicter plugin \<= 3.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-37414](https://cve.now/CVE-2024-37414.md): WordPress Depicter Slider plugin \<= 3.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-3587](https://cve.now/CVE-2024-3587.md): Premium Portfolio Features for Phlox theme \<= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios' (CVSS 6.4)
- [CVE-2024-37222](https://cve.now/CVE-2024-37222.md): WordPress Master Slider plugin \<= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-4390](https://cve.now/CVE-2024-4390.md): Depicter \<= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation (CVSS 6.5)
- [CVE-2023-50900](https://cve.now/CVE-2023-50900.md): WordPress Master Slider plugin \<= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-4375](https://cve.now/CVE-2024-4375.md): Master Slider – Responsive Touch Slider \<= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms\_layer Shortcode (CVSS 6.4)
- [CVE-2023-6382](https://cve.now/CVE-2023-6382.md): Master Slider - Responsive Touch Slider \<= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-4470](https://cve.now/CVE-2024-4470.md): Master Slider – Responsive Touch Slider \<= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2023-39163](https://cve.now/CVE-2023-39163.md): WordPress Phlox Shop plugin \<= 2.0.0 - Unauthenticated Local File Inclusion vulnerability (CVSS 8.6)
- [CVE-2023-38399](https://cve.now/CVE-2023-38399.md): WordPress Phlox Portfolio plugin \<= 2.3.1 - Unauthenticated Local File Inclusion vulnerability (CVSS 8.6)
- [CVE-2023-7064](https://cve.now/CVE-2023-7064.md): Shortcodes and extra features for Phlox theme \<= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin\_template\_control\_importer (CVSS 7.5)
- [CVE-2024-3517](https://cve.now/CVE-2024-3517.md): Shortcodes and extra features for Phlox theme \<= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget (CVSS 6.4)
- [CVE-2024-1533](https://cve.now/CVE-2024-1533.md): Shortcodes and extra features for Phlox theme \<= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-1396](https://cve.now/CVE-2024-1396.md): Shortcodes and extra features for Phlox theme \<= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title\_tag' (CVSS 6.4)
- [CVE-2024-3341](https://cve.now/CVE-2024-3341.md): Shortcodes and extra features for Phlox theme \<= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux\_gmaps' Shortcode (CVSS 6.4)
- [CVE-2024-1348](https://cve.now/CVE-2024-1348.md): Shortcodes and extra features for Phlox theme \<= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS (CVSS 6.4)
- [CVE-2024-32600](https://cve.now/CVE-2024-32600.md): WordPress Master Slider plugin \<= 3.9.5 - PHP Object Injection vulnerability (CVSS 8.3)
- [CVE-2024-32580](https://cve.now/CVE-2024-32580.md): WordPress Master Slider plugin \<= 3.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-1357](https://cve.now/CVE-2024-1357.md): Shortcodes and extra features for Phlox theme \<= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux\_timeline' Shortcode (CVSS 6.4)
- [CVE-2024-31099](https://cve.now/CVE-2024-31099.md): WordPress Phlox Core Elements plugin \<= 2.15.7 - Broken Access Control vulnerability (CVSS 6.4)
- [CVE-2023-51491](https://cve.now/CVE-2023-51491.md): WordPress Depicter Slider plugin \<= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2024-1449](https://cve.now/CVE-2024-1449.md): Master Slider – Responsive Touch Slider \<= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-0611](https://cve.now/CVE-2024-0611.md): Master Slider – Responsive Touch Slider \<= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback (CVSS 4.4)
- [CVE-2023-6326](https://cve.now/CVE-2023-6326.md): Master Slider - Responsive Touch Slider \<= 3.9.10 - Cross-Site Request Forgery via process\_bulk\_action (CVSS 5.4)
- [CVE-2023-6493](https://cve.now/CVE-2023-6493.md): Depicter Slider – Responsive Image Slider, Video Slider & Post Slider \<= 2.0.6 - Cross-Site Request Forgery via save (CVSS 4.3)
- [CVE-2023-50368](https://cve.now/CVE-2023-50368.md): WordPress Shortcodes and extra features for Phlox theme Plugin \<= 2.15.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5)
- [CVE-2023-47508](https://cve.now/CVE-2023-47508.md): WordPress Master Slider Pro Plugin \<= 3.6.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/averta
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.