Averta vulnerabilities
We track 10 vulnerabilities in Averta products across 13 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2026.
Latest Averta vulnerabilities
- 7.1 High severity
Master Slider: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider master-slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.11.5.
- 8.1 High severity
Premium Portfolio Features for Phlox theme: Improper Control of Filename for Include/Require Statement in PHP Program
The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'args[extra_template_path]' parameter. This makes it possible for unauthenticated attackers to includ
- 7.5 High severity
Depicter — Popup & Slider Builder: Improper Neutralization of Special Elements used in an SQL Command
The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation
- 9.8 Critical severity
Shortcodes and extra features for Phlox theme: Missing Authorization
Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a throug
- 8.8 High severity
Depicter — Popup & Slider Builder: Unrestricted Upload of File with Dangerous Type
The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attacke
- 8.6 High severity
Phlox Shop: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Averta Phlox Shop allows PHP Local File Inclusion.This issue affects Phlox Shop: from n/a through 2.0.0.
- 8.6 High severity
Phlox Portfolio: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Averta Phlox Portfolio allows PHP Local File Inclusion.This issue affects Phlox Portfolio: from n/a through 2.3.1.
- 9.8 Critical severity
Shortcodes and extra features for Phlox theme: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox theme allows PHP Local File Inclusion.This issue affects Shortcodes and extra features for Phlox theme: from n/a t
- 7.5 High severity
Shortcodes and extra features for Phlox theme: Deserialization of Untrusted Data
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.17.5 via deserialization of untrusted input from the vulnerable 'id' parameter in the 'auxin_template_control_i
- 8.8 High severity
Shortcodes and extra features for Phlox theme: Missing Authorization
Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7.