vciy

CVEs we hold for Averta

Records whose assigning authority named Averta as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-74008WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerabilityaverta Shortcodes and extra features for Phlox theme
CVE-2026-66622WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerabilityaverta Depicter Slider
CVE-2026-57737WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.16 - Cross Site Scripting (XSS) vulnerabilityAverta LTD Shortcodes and extra features for Phlox theme
CVE-2026-56014WordPress Master Slider plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerabilityAverta Master Slider
CVE-2026-48968WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerabilityAverta Master Slider
CVE-2025-8383Depicter <= 4.0.4 - Cross-Site Request Forgeryaverta Depicter — Popup & Slider Builder
CVE-2025-69016WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerabilityaverta Shortcodes and extra features for Phlox theme
CVE-2025-68558WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerabilityaverta Depicter Slider
CVE-2025-63071WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerabilityaverta Shortcodes and extra features for Phlox theme
CVE-2025-63045WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityaverta Master Slider Pro
CVE-2025-58025WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerabilityaverta Master Slider
CVE-2025-5291Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide…averta Master Slider – Responsive Touch Slider
CVE-2025-4776Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attributeaverta Phlox
CVE-2025-39412WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerabilityaverta Master Slider
CVE-2025-2011Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameteraverta Depicter — Popup & Slider Builder
CVE-2025-13215Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposureaverta Shortcodes and extra features for Phlox theme
CVE-2025-12497Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via…averta Premium Portfolio Features for Phlox theme
CVE-2025-12379Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2025-11373Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel…averta Depicter — Popup & Slider Builder
CVE-2025-11370Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updatesaverta Depicter — Popup & Slider Builder
CVE-2024-9545Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-8486Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-6339Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parametersaverta Phlox PRO
CVE-2024-50500WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerabilityaverta Shortcodes and extra features for Phlox theme
CVE-2024-47381WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityaverta Depicter Slider
CVE-2024-47359WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerabilityaverta Depicter Slider
CVE-2024-4633Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup…averta Depicter — Popup & Slider Builder
CVE-2024-4470Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Master Slider – Responsive Touch Slider
CVE-2024-4390Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generationaverta Depicter — Popup & Slider Builder
CVE-2024-4389Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup…averta Depicter — Popup & Slider Builder
CVE-2024-4375Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Master Slider – Responsive Touch Slider
CVE-2024-43161WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityAverta Depicter Slider
CVE-2024-37414WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerabilityAverta Depicter Slider
CVE-2024-37222WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerabilityAverta Master Slider
CVE-2024-3587Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via '…averta Premium Portfolio Features for Phlox theme
CVE-2024-3517Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-3341Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-32600WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerabilityAverta Master Slider
CVE-2024-32580WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerabilityAverta Master Slider
CVE-2024-31099WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerabilityAverta Shortcodes and extra features for Phlox theme
CVE-2024-1533Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Shortcodes and extra features for Phlox theme
CVE-2024-1449Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Master Slider – Responsive Touch Slider
CVE-2024-1396Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-1384Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Premium Portfolio Features for Phlox theme
CVE-2024-13757Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Master Slider – Responsive Touch Slider
CVE-2024-1357Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-1348Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-12588Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Shortcodes and extra features for Phlox theme
CVE-2024-11731Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…averta Master Slider – Responsive Touch Slider
CVE-2024-0611Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider…averta Master Slider – Responsive Touch Slider
CVE-2023-7064Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via…averta Shortcodes and extra features for Phlox theme
CVE-2023-6493Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via saveaverta Depicter — Popup & Slider Builder
CVE-2023-6382Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Master Slider – Responsive Touch Slider
CVE-2023-6326Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_actionaverta Master Slider – Responsive Touch Slider
CVE-2023-51491WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityAverta Depicter Slider
CVE-2023-50900WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerabilityAverta Master Slider
CVE-2023-50368WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)Averta Shortcodes and extra features for Phlox theme
CVE-2023-47508WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)Averta Master Slider Pro
CVE-2023-39163WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerabilityAverta Phlox Shop
CVE-2023-38399WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerabilityAverta Phlox Portfolio

60 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.