averta vulnerabilities

Recent CVEs affecting averta products. 30 tracked.

averta has 30 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 30. Most recent: 2025-12-09. Highest priority: CVE-2023-7064 (score 41/100).

• CVE-2025-58025 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta M
• CVE-2025-63045 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta M
• CVE-2025-5291 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2025-39412 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in averta Master Slider master-slider.This issue affects Master Slider: fr
• CVE-2024-8486 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-6490 MEDIUM 6.5 UPGRADE During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which al
• CVE-2024-6339 MEDIUM 6.1 UPGRADE The Phlox PRO theme for WordPress is vulnerable to Reflected Cross-Site Scripting via search parameters in all
• CVE-2024-50500 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements all
• CVE-2024-4470 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2024-4375 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2024-47381 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta D
• CVE-2024-43161 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in A
• CVE-2024-3587 MEDIUM 6.4 UPGRADE The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripti
• CVE-2024-3517 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-3341 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-37222 HIGH 7.1 UPGRADE Cross Site Scripting (XSS) vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Maste
• CVE-2024-32600 HIGH 8.3 UPGRADE Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from
• CVE-2024-32580 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta M
• CVE-2024-1533 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-1396 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-1384 MEDIUM 6.4 UPGRADE The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripti
• CVE-2024-1357 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-1348 MEDIUM 6.4 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2024-13757 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2024-11731 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2023-7064 HIGH 7.5 UPGRADE The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection i
• CVE-2023-6382 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2023-50900 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Averta Master Slider.This issue affects Master Slider: from
• CVE-2023-37888 HIGH 7.6 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shor
• CVE-2022-47176 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Exploiting I

FAQ

How do I fix averta vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is averta being exploited right now?

None of the tracked averta CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which averta CVE should I patch first?

CVE-2023-7064 currently ranks highest (41/100): The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection i.

Products

• auxinportfolio
• depicter slider
• master slider
• master slider pro
• phlox
• shortcodes and extra features for phlox theme

RSS feed for averta · ← Back to latest CVEs