Averta vulnerabilities
57 published CVEs name Averta among the affected products.
- Published CVEs
- 57
- Last 12 months
- 10
- Critical
- 0
- Known exploited
- 0
Critical 0High 11Medium 46Low 0Not scored 0
CVEs per yearBy the year they were published
- 20232
- 202435
- 202512
- 20268
Newest CVEs
- CVE-2026-66622
WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability
averta · Depicter Slider
High7.5 - CVE-2026-56014
WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability
Averta · Master Slider
High7.1 - CVE-2026-48968
WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability
Averta · Master Slider
Medium6.5 - CVE-2025-68558
WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability
averta · Depicter Slider
Medium6.5 - CVE-2025-12379
Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
averta · Shortcodes and extra features for Phlox theme
Medium6.4 - CVE-2025-4776
Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute
averta · Phlox
Medium6.4 - CVE-2025-13215
Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure
averta · Shortcodes and extra features for Phlox theme
Medium5.3 - CVE-2025-11370
Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates
averta · Depicter — Popup & Slider Builder
Medium5.3 - CVE-2025-63071
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability
averta · Shortcodes and extra features for Phlox theme
Medium5.3 - CVE-2025-63045
WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
averta · Master Slider Pro
Medium6.5
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)34
- CWE-352 Cross-site request forgery (CSRF)6
- CWE-862 Missing authorization6
- CWE-22 Path traversal2
- CWE-502 Deserialization of untrusted data2
- CWE-89 SQL injection2
- CWE-200 Exposure of sensitive information1
- CWE-201 1
- CWE-269 Improper privilege management1
- CWE-434 Unrestricted file upload1