CVE-2024-50500: WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vuln

WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

Status

Published

2025-02-03

Updated

2026-05-11

Assigning organization

Patchstack

Description

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through <= 2.17.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

averta Shortcodes and extra features for Phlox theme

Default version status: unaffected

0 to ≤ 2.17.4affected

References

https://patchstack.com/database/Wordpress/Plugin/auxin-elements/vulnerability/wordpress-phlox-core-elements-plugin-2-17-2-broken-access-control-vulnerability?_s_id=cve ↗