Sensitive Information Exposure in Aventa Shortcodes for Phlox Theme by Auxin
CVE-2025-63071

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Shortcodes And Extra Features For Phlox Theme
Vendor
CVE Published:
9 December 2025

What is CVE-2025-63071?

The Aventa plugin's Shortcodes and extra features for the Phlox theme are susceptible to a vulnerability that allows the retrieval of sensitive data embedded within sent messages. This issue can potentially expose confidential information to unauthorized users, posing a significant risk to the website's security and the privacy of user data. Users are urged to update to the latest version to mitigate this risk.

Affected Version(s)

Shortcodes and extra features for Phlox theme <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/auxi...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bao - BlueRock | Patchstack Bug Bounty Program
JSON
.