CVE Catalog

CVE-2026-74008

MediumCVSS 5.3
Published: Translated: NVD NIST

Summary

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.

Risk Assessment

Unauthenticated attackers may access sensitive data, potentially leading to privacy and information security breaches.

Recommendation

Upgrade the Shortcodes and extra features for Phlox theme plugin to a version newer than 2.17.22 that includes a fix.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS