PT-2025-2875 · Averta · Averta Shortcodes

Rafie Muhammad · Published 2025-02-03 · Updated 2025-05-26 · CVE-2024-50500

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions By Averta Shortcodes and extra features for Phlox theme versions 2.17.2 and earlier

Description The issue affects the By Averta Shortcodes and extra features for the Phlox theme, allowing exploitation of incorrectly configured access control security levels due to a lack of authorization.

Recommendations For versions 2.17.2 and earlier, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the shortcodes and extra features for the Phlox theme until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-50500

Affected Products

Averta Shortcodes

References · 6

• https://osv.dev/vulnerability/CVE-2024-50500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50500 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/auxin-elements/vulnerability/wordpress-phlox-core-elements-plugin-2-17-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1886427056898007242 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/auxin-elements/vulnerability/wordpress-phlox-core-elements-plugin-2-17-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/123573 · Telegram Post