CVE-2026-74008

MediumCVSS 5.3

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.

Unauthenticated attackers may access sensitive data, potentially leading to privacy and information security breaches.

Upgrade the Shortcodes and extra features for Phlox theme plugin to a version newer than 2.17.22 that includes a fix.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.