SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-74008

MEDIUM · CVSS 5.3 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Phlox theme versions up to 2.17.22 are vulnerable to unauthenticated sensitive data exposure through shortcodes and additional features, potentially allowing attackers to access confidential information without authentication. This vulnerability poses a medium risk, and website administrators using the affected theme should prioritize remediation to protect user data and maintain compliance with data protection regulations.

CVE
CVE-2026-74008
Severity
MEDIUM
CVSS
5.3
EPSS
0.24%

Original NVD Description

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.