CVE-2026-74008
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Insertion of Sensitive Information Into Sent Data vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows Retrieve Embedded Sensitive Data.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.17.24.
Risk Assessment
Sensitive data may be exposed in sent data, potentially leading to information disclosure to unauthorized recipients.
Recommendation
Update the Shortcodes and extra features for Phlox theme plugin to a version later than 2.17.24.
Other vulnerabilities in Shortcodes and extra features for Phlox theme
See all- CVE-2026-57737Medium
DOM-Based XSS vulnerability in the Shortcodes and extra features for Phlox theme plugin by Averta LTD. Improper input neutralization during page generation allows execution of malicious scripts in the victim's browser.
- CVE-2025-69016Medium
Missing Authorization vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shortcodes and extra features for Phlox theme from n/a through 2.17.22.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows Retrieve Embedded Sensitive Data.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.17.24.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS