AV
Vendor
averta
19 products with CVEs on record
87
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-66622
DS
Depicter Slider
averta
7.5
0%
Aug 18WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability
CVE-2026-56014
MS
Master Slider
Averta
7.1
0%
Jun 25WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48968
MS
Master Slider
Averta
6.5
0%
May 27WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68558
DS
Depicter Slider
averta
6.5
0%
Jan 22WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability
CVE-2025-12379
SA
Shortcodes and extra features for Phlox theme
averta
6.4
0%
Jan 10Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
CVE-2025-4776
PH
Phlox
averta
6.4
0%
Jan 6Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute
CVE-2025-13215
SA
Shortcodes and extra features for Phlox theme
averta
5.3
0%
Jan 6Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure
CVE-2025-11370
DP
Depicter — Popup & Slider Builder
averta
5.3
0%
Jan 6Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates
CVE-2025-63071
SA
Shortcodes and extra features for Phlox theme
averta
5.3
0%
Dec 9WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability
CVE-2025-63045
MS
Master Slider Pro
averta
6.5
0%
Dec 9WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-12497
PP
Premium Portfolio Features for Phlox theme
averta
8.1
1%
Nov 5Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
CVE-2025-11373
DP
Depicter — Popup & Slider Builder
averta
4.3
0%
Nov 5Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload
CVE-2025-8383
DP
Depicter — Popup & Slider Builder
averta
4.3
0%
Oct 31Depicter <= 4.0.4 - Cross-Site Request Forgery
CVE-2025-58025
MS
Master Slider
averta
5.4
0%
Sep 22WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-5291
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
Jun 17Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
CVE-2025-39412
MS
Master Slider
averta
4.3
0%
May 19WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability
CVE-2025-2011
DP
Depicter — Popup & Slider Builder
averta
7.5
46%
May 6Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
CVE-2024-11731
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
Mar 5Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
CVE-2024-13757
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
Mar 5Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
CVE-2024-12173
MS
Master Slider
Averta
3.5
0%
Feb 19Master Slider < 3.10.5 - Editor+ Stored XSS
CVE-2024-50500
SA
Shortcodes and extra features for Phlox theme
averta
9.8
0%
Feb 3WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability
CVE-2024-12588
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
Dec 21Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
CVE-2024-9545
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
Dec 21Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
CVE-2022-47176
DS
Depicter Slider
Averta
4.3
1%
Dec 13WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability
CVE-2024-4633
DP
Depicter — Popup & Slider Builder
averta
6.4
0%
Dec 6Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-47359
DS
Depicter Slider
averta
9.8
0%
Nov 1WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability
CVE-2024-47381
DS
Depicter Slider
averta
4.8
0%
Oct 5WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-8486
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
Oct 5Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
CVE-2024-1384
PP
Premium Portfolio Features for Phlox theme
averta
5.4
0%
Aug 29Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-6339
PP
Phlox PRO
averta
6.1
0%
Aug 21Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters
CVE-2024-4389
DP
Depicter — Popup & Slider Builder
averta
8.8
1%
Aug 14Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2024-43161
DS
Depicter Slider
Averta
4.8
0%
Aug 12WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-6490
MS
Master Slider
Averta
6.5
0%
Jul 26Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion
CVE-2024-37414
DS
Depicter Slider
Averta
5.4
0%
Jul 22WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-3587
PP
Premium Portfolio Features for Phlox theme
averta
5.4
0%
Jul 16Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
CVE-2024-37222
MS
Master Slider
Averta
6.1
0%
Jun 20WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-4390
DP
Depicter — Popup & Slider Builder
averta
6.5
1%
Jun 20Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation
CVE-2023-50900
MS
Master Slider
Averta
4.3
0%
Jun 19WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-4375
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
Jun 18Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
CVE-2023-6382
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
Jun 1Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4470
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
May 21Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-39163
PS
Phlox Shop
Averta
8.6
1%
May 17WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability
CVE-2023-38399
PP
Phlox Portfolio
Averta
8.6
1%
May 17WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability
CVE-2023-37888
SA
Shortcodes And Extra Features For Phlox Theme
Averta
9.8
1%
May 17WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability
CVE-2023-7064
SA
Shortcodes and extra features for Phlox theme
averta
7.5
1%
May 2Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
CVE-2024-3517
SA
Shortcodes and extra features for Phlox theme
averta
5.4
1%
May 2Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget
CVE-2024-1533
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
May 2Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1396
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
May 2Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
CVE-2024-3341
SA
Shortcodes and extra features for Phlox theme
averta
5.4
1%
May 2Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
CVE-2024-1348
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
May 2Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
CVE-2024-32600
MS
Master Slider
Averta
9.6
0%
Apr 18WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability
CVE-2024-32580
MS
Master Slider
Averta
5.4
0%
Apr 18WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-1357
SA
Shortcodes and extra features for Phlox theme
averta
5.4
0%
Apr 16Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode
CVE-2024-31099
SA
Shortcodes and extra features for Phlox theme
Averta
8.8
0%
Apr 1WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability
CVE-2023-51491
DS
Depicter Slider
Averta
8.8
0%
Mar 16WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-1449
MS
Master Slider – Responsive Touch Slider
averta
5.4
0%
Mar 2Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0611
MS
Master Slider – Responsive Touch Slider
averta
4.8
1%
Mar 2Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback
CVE-2023-6326
MS
Master Slider – Responsive Touch Slider
averta
4.3
0%
Mar 2Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action
CVE-2023-6493
DP
Depicter — Popup & Slider Builder
averta
4.3
0%
Jan 5Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save
CVE-2023-47507
MS
Master Slider Pro
Averta
9.8
0%
Dec 20WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection