CVE-2023-37888: WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File

WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability

Status

Published

2024-05-17

Updated

2026-04-28

Assigning organization

Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox theme allows PHP Local File Inclusion.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.14.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

By Averta Shortcodes and extra features for Phlox theme

Default version status: unaffected

n/a to ≤ 2.14.0affected

References

https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-14-0-unauthenticated-local-file-inclusion-vulnerability?_s_id=cve ↗