4.3 Medium

CVE-2024-50500 Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows…

Description

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through <= 2.17.4.

Affected products and versions

Product	Affected versions	Fixed in
Shortcodes and extra features for Phlox theme 2.17	earliest → 2.17.2	No fix stated
Shortcodes and extra features for Phlox theme 2.17	earliest → 2.17.4	No fix stated

The 2 CVEs of Shortcodes and extra features for Phlox theme →

CVE-2023-37888 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and… 7.6 High

Do you use Shortcodes and extra features for Phlox theme?

Track this CVE Watch Shortcodes and extra features for Phlox theme Check my SBOMs

www.cveye.io/en/cve/CVE-2024-50500

Timeline

Published February 3, 2025
Last modified May 11, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-50500 Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows…

Description

Affected products and versions

Other CVEs of Shortcodes and extra features for Phlox theme