Shortcodes and extra features for Phlox theme Security & Risk Analysis

wordpress.org/plugins/auxin-elements

Powerful and comprehensive plugin that extends the functionality of Phlox Elementor theme.

90K active installs v2.17.15 PHP 7.0+ WP 5.0+ Updated Jan 24, 2026
auxinavertaelementorfullwidthphlox
32
D · High Risk
CVEs total21
Unpatched2
Last CVEJan 9, 2026
Safety Verdict

Is Shortcodes and extra features for Phlox theme Safe to Use in 2026?

High Risk

Score 32/100

Shortcodes and extra features for Phlox theme carries significant security risk with 21 known CVEs, 2 still unpatched. Consider switching to a maintained alternative.

21 known CVEs 2 unpatched Last CVE: Jan 9, 2026Updated 2mo ago
Risk Assessment

The auxin-elements plugin version 2.17.15 exhibits a concerning security posture due to a history of numerous vulnerabilities, including critical and high severity ones. The static analysis reveals a significant attack surface with 8 unprotected AJAX handlers out of 34 total entry points, indicating potential for unauthorized access. Taint analysis flags two high-severity flows with unsanitized paths, suggesting a risk of sensitive data exposure or code execution. The presence of the `unserialize` function, especially without clear sanitization protocols, is a known risk for deserialization vulnerabilities, which is further amplified by the plugin's historical vulnerability types. While the plugin demonstrates good practices in using prepared statements for SQL queries and generally good output escaping, the sheer volume of past vulnerabilities and the identified unprotected entry points and taint flows outweigh these strengths.

The vulnerability history is particularly alarming, with 21 known CVEs, two of which are currently unpatched. The prevalence of vulnerabilities related to information exposure, authorization bypass, cross-site scripting, and remote file inclusion points to recurring security weaknesses in the plugin's development. The most recent vulnerability being in 2026 is a significant concern, suggesting either a future vulnerability or a data entry error that needs immediate clarification. Overall, while some secure coding practices are observed, the plugin's past and present security findings present a substantial risk to WordPress sites using it, necessitating immediate attention and remediation.

Key Concerns

  • Unprotected AJAX handlers
  • High severity taint flows
  • Presence of 'unserialize' function
  • Unpatched CVEs (critical)
  • Unpatched CVEs (high, 2)
  • Large number of historical CVEs
  • Vulnerability types: RFI, XSS, auth bypass
Vulnerabilities
21

Shortcodes and extra features for Phlox theme Security Vulnerabilities

CVEs by Year

3 CVEs in 2022
2022
2 CVEs in 2023
2023
11 CVEs in 2024
2024
3 CVEs in 2025 · unpatched
2025
2 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
1
High
2
Medium
18

21 total CVEs

CVE-2025-12379medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget

Jan 9, 2026 Patched in 2.17.14 (2d)
CVE-2025-13215medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure

Jan 5, 2026 Patched in 2.17.14 (1d)
CVE-2025-69016medium · 4.3Missing Authorization

Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization

Dec 27, 2025Unpatched
CVE-2025-63071medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Shortcodes and extra features for Phlox <= 2.17.12 - Unauthenticated Information Exposure

Oct 26, 2025Unpatched
CVE-2024-50500medium · 4.3Missing Authorization

Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization

Jan 31, 2025 Patched in 2.17.5 (35d)
CVE-2024-12588medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget

Dec 20, 2024 Patched in 2.17.3 (76d)
CVE-2024-9545medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes

Dec 20, 2024 Patched in 2.17.1 (76d)
CVE-2024-8486medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

Oct 4, 2024 Patched in 2.16.4 (1d)
CVE-2024-1348medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

Apr 15, 2024 Patched in 2.15.8 (109d)
CVE-2024-3341medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode

Apr 15, 2024 Patched in 2.15.8 (109d)
CVE-2024-1396medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'

Apr 15, 2024 Patched in 2.15.8 (109d)
CVE-2024-1533medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 15, 2024 Patched in 2.15.8 (109d)
CVE-2024-3517medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget

Apr 15, 2024 Patched in 2.15.6 (109d)
CVE-2023-7064high · 7.5Deserialization of Untrusted Data

Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer

Apr 15, 2024 Patched in 2.17.6 (540d)
CVE-2024-1357medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode

Apr 15, 2024 Patched in 2.15.8 (109d)
CVE-2024-31099medium · 4.3Missing Authorization

Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization

Mar 29, 2024 Patched in 2.15.8 (126d)
CVE-2023-50368medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

Dec 6, 2023 Patched in 2.15.5 (65d)
CVE-2023-37888critical · 9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion

Nov 15, 2023 Patched in 2.15.0 (69d)
CVE-2022-3359high · 7.2Deserialization of Untrusted Data

Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection

Nov 17, 2022 Patched in 2.10.7 (432d)
WF-85551ba1-6d6e-47a0-864f-f9d0a0a11056-auxin-elementsmedium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jul 12, 2022 Patched in 2.9.14 (560d)
CVE-2022-1910medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Shortcodes and extra features for Phlox theme <= 2.9.7 - Reflected Cross-Site-Scripting

Jun 20, 2022 Patched in 2.9.8 (582d)
Code Analysis
Analyzed Mar 17, 2026

Shortcodes and extra features for Phlox theme Code Analysis

Dangerous Functions
1
Raw SQL Queries
1
19 prepared
Unescaped Output
236
1630 escaped
Nonce Checks
26
Capability Checks
22
File Operations
9
External Requests
11
Bundled Libraries
1

Dangerous Functions Found

unserialize$data = unserialize( wp_remote_retrieve_body( $response ) );includes\classes\class-auxin-welcome.php:613

Bundled Libraries

TinyMCE

SQL Query Safety

95% prepared20 total queries

Output Escaping

87% escaped1866 total outputs
Data Flows
12 unsanitized

Data Flow Analysis

20 flows12 with unsanitized paths
get_license_result (admin\includes\classes\class-auxin-license-activation.php:52)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
8 unprotected

Shortcodes and extra features for Phlox theme Attack Surface

Entry Points40
Unprotected8

AJAX Handlers 34

authwp_ajax_send_feedbackadmin\includes\admin-ajax.php:69
authwp_ajax_aux-remove-feedback-noticeadmin\includes\admin-ajax.php:96
authwp_ajax_remind_feedbackadmin\includes\admin-ajax.php:121
authwp_ajax_aux_isotope_groupadmin\includes\admin-ajax.php:141
authwp_ajax_filter_get_contentadmin\includes\admin-ajax.php:243
authwp_ajax_noprive_filter_get_contentadmin\includes\admin-ajax.php:244
authwp_ajax_auxin_dismissed_noticeadmin\includes\admin-ajax.php:260
authwp_ajax_auxin_display_actvation_formadmin\includes\admin-ajax.php:302
authwp_ajax_auxin_purchase_activationadmin\includes\admin-ajax.php:333
authwp_ajax_auxin_start_upgradingadmin\includes\admin-ajax.php:355
authwp_ajax_auxin_customizer_exportadmin\includes\admin-ajax.php:396
authwp_ajax_auxin_customizer_importadmin\includes\admin-ajax.php:471
authwp_ajax_auxin_template_control_importeradmin\includes\admin-ajax.php:504
authwp_ajax_aux_verify_envato_elements_tokenincludes\classes\class-auxels-envato-elements.php:48
authwp_ajax_auxin_demo_dataincludes\classes\class-auxin-demo-importer.php:54
authwp_ajax_auxin_templates_dataincludes\classes\class-auxin-demo-importer.php:55
authwp_ajax_import_stepincludes\classes\class-auxin-demo-importer.php:56
authwp_ajax_aux_setup_pluginsincludes\classes\class-auxin-welcome.php:120
authwp_ajax_aux_ajax_uninstallincludes\classes\class-auxin-welcome.php:122
authwp_ajax_aux_ajax_lightboxincludes\classes\class-auxin-welcome.php:124
authwp_ajax_aux_step_managerincludes\classes\class-auxin-welcome.php:125
authwp_ajax_aux_the_recent_productsincludes\elements\recent-products.php:643
noprivwp_ajax_aux_the_recent_productsincludes\elements\recent-products.php:644
authwp_ajax_wpseo_filter_shortcodesincludes\general-hooks.php:2841
authwp_ajax_load_more_elementpublic\includes\frontend-ajax.php:121
noprivwp_ajax_load_more_elementpublic\includes\frontend-ajax.php:122
authwp_ajax_auxels_remove_from_cartpublic\includes\frontend-ajax.php:190
noprivwp_ajax_auxels_remove_from_cartpublic\includes\frontend-ajax.php:191
authwp_ajax_auxels_add_to_cartpublic\includes\frontend-ajax.php:255
noprivwp_ajax_auxels_add_to_cartpublic\includes\frontend-ajax.php:256
authwp_ajax_auxels_get_refreshed_fragmentspublic\includes\frontend-ajax.php:294
noprivwp_ajax_auxels_get_refreshed_fragmentspublic\includes\frontend-ajax.php:295
authwp_ajax_aux_modern_search_handlerpublic\includes\frontend-ajax.php:347
noprivwp_ajax_aux_modern_search_handlerpublic\includes\frontend-ajax.php:348

Shortcodes 6

[aux_accordion_tab] includes\elements\accordion-widget.php:172
[aux_attach_url] includes\elements\attachment-url.php:13
[aux_responsive_image_tag] includes\elements\attachment-url.php:24
[aux_timeline] includes\general-shortcodes.php:7
[aux_row] includes\general-shortcodes.php:404
[aux_col] includes\general-shortcodes.php:414
WordPress Hooks 295
filtermce_external_pluginsadmin\includes\admin-hooks.php:34
filtermce_buttonsadmin\includes\admin-hooks.php:35
actioninitadmin\includes\admin-hooks.php:37
actionwp_loadedadmin\includes\admin-hooks.php:57
actionadmin_enqueue_scriptsadmin\includes\admin-hooks.php:67
filterauxin_metabox_fieldsadmin\includes\admin-hooks.php:118
actionadmin_bar_menuadmin\includes\admin-hooks.php:144
actionadmin_bar_menuadmin\includes\admin-hooks.php:163
actionadmin_menuadmin\includes\admin-hooks.php:173
actionadmin_menuadmin\includes\admin-hooks.php:205
actionupgrader_process_completeadmin\includes\admin-hooks.php:216
actionauxin_updatedadmin\includes\admin-hooks.php:217
actionauxin_theme_menu_update_countadmin\includes\admin-hooks.php:231
actionadmin_initadmin\includes\admin-hooks.php:249
filterauxin_admin_metabox_models_postadmin\includes\admin-hooks.php:291
filterauxin_admin_metabox_models_pageadmin\includes\admin-hooks.php:361
filteradmin_footer_textadmin\includes\admin-hooks.php:408
actionrightnow_endadmin\includes\admin-hooks.php:445
actionafter_switch_themeadmin\includes\admin-hooks.php:485
actionimport_endadmin\includes\admin-hooks.php:486
filterauxin_custom_js_stringadmin\includes\admin-hooks.php:504
filterauxin_custom_css_stringadmin\includes\admin-hooks.php:522
actionauxin_plugin_updatedadmin\includes\admin-hooks.php:538
actionadmin_initadmin\includes\admin-hooks.php:554
actionadmin_noticesadmin\includes\admin-hooks.php:597
actionload-options-media.phpadmin\includes\admin-hooks.php:602
actionauxin_plugin_updatedadmin\includes\admin-hooks.php:603
filterauxin_metabox_fieldsadmin\includes\admin-hooks.php:632
actionadmin_noticesadmin\includes\admin-hooks.php:679
actionadmin_noticesadmin\includes\admin-hooks.php:690
actionhttp_api_curladmin\includes\admin-hooks.php:702
filterauxin_official_pluginsadmin\includes\admin-hooks.php:716
filterauxin_official_themesadmin\includes\admin-hooks.php:728
actionauxin_admin_welcome_after_headeradmin\includes\admin-hooks.php:755
filterauxin_averta_plugins_regexadmin\includes\admin-hooks.php:765
actionauxin_plugin_updatedadmin\includes\admin-hooks.php:774
actionadmin_noticesadmin\includes\admin-hooks.php:836
actionadmin_initadmin\includes\admin-hooks.php:871
actionadmin_initadmin\includes\admin-hooks.php:906
actionsave_postadmin\includes\admin-hooks.php:930
filtersite_status_testsadmin\includes\classes\class-auxels-system-check.php:12
filterupgrader_clear_destinationadmin\includes\classes\class-auxin-upgrader-plugin.php:32
filterupgrader_pre_downloadadmin\includes\classes\class-auxin-upgrader-plugin.php:67
filterupgrader_pre_downloadadmin\includes\classes\class-auxin-upgrader-plugin.php:71
actionload-plugins.phpadmin\includes\classes\class-auxin-upgrader-prepare.php:18
actionload-update.phpadmin\includes\classes\class-auxin-upgrader-prepare.php:19
actionload-update-core.phpadmin\includes\classes\class-auxin-upgrader-prepare.php:20
actionwp_update_pluginsadmin\includes\classes\class-auxin-upgrader-prepare.php:21
actionload-themes.phpadmin\includes\classes\class-auxin-upgrader-prepare.php:23
actionload-update.phpadmin\includes\classes\class-auxin-upgrader-prepare.php:24
actionload-update-core.phpadmin\includes\classes\class-auxin-upgrader-prepare.php:25
actionwp_update_themesadmin\includes\classes\class-auxin-upgrader-prepare.php:26
actionadmin_initadmin\includes\classes\class-auxin-upgrader-prepare.php:28
filterupgrader_pre_installadmin\includes\classes\class-auxin-upgrader-theme.php:32
filterupgrader_post_installadmin\includes\classes\class-auxin-upgrader-theme.php:33
filterupgrader_clear_destinationadmin\includes\classes\class-auxin-upgrader-theme.php:34
actionauxin_plugin_updatedadmin\includes\compatibility\element-pack\element-pack.php:12
actionplugins_loadedadmin\includes\compatibility\element-pack\element-pack.php:26
actionadmin_noticesadmin\includes\compatibility\sliders\layerslider.php:13
actionadmin_noticesadmin\includes\compatibility\sliders\rev.php:11
actionadmin_initadmin\includes\compatibility\smush\smush.php:13
actionadmin_initadmin\includes\compatibility\ti-woocommerce-wishlist\ti-woocommerce-wishlist.php:19
filterwoocommerce_create_pagesadmin\includes\compatibility\woocommerce\wc.php:7
actioncustomize_controls_initadmin\includes\compatibility\woocommerce\wc.php:27
actionadmin_initadmin\includes\compatibility\yoast-seo\yoast-seo.php:11
actionauxin_readyadmin\includes\index.php:35
actionplugins_loadedauxin-elements.php:96
actionadmin_enqueue_scriptsincludes\classes\class-auxels-admin-assets.php:28
actionadmin_initincludes\classes\class-auxels-archive-menu-links.php:15
actionexport_filtersincludes\classes\class-auxels-import.php:17
filterexport_argsincludes\classes\class-auxels-import.php:19
actionrss2_headincludes\classes\class-auxels-import.php:22
actionimport_startincludes\classes\class-auxels-import.php:24
filtercustomize_nav_menu_available_item_typesincludes\classes\class-auxels-wc-attribute-nav-menu.php:53
filtercustomize_nav_menu_available_itemsincludes\classes\class-auxels-wc-attribute-nav-menu.php:54
actionadmin_head-nav-menus.phpincludes\classes\class-auxels-wc-attribute-nav-menu.php:55
actionwp_dashboard_setupincludes\classes\class-auxin-admin-dashboard.php:30
actionauxin_demo_import_finishincludes\classes\class-auxin-demo-importer.php:57
actionadmin_initincludes\classes\class-auxin-import.php:67
actionafter_switch_themeincludes\classes\class-auxin-install.php:30
actioninitincludes\classes\class-auxin-install.php:32
filterwp_setup_nav_menu_itemincludes\classes\class-auxin-master-nav-menu-admin.php:27
actionwp_update_nav_menu_itemincludes\classes\class-auxin-master-nav-menu-admin.php:30
filterwp_edit_nav_menu_walkerincludes\classes\class-auxin-master-nav-menu-admin.php:33
actionadmin_menuincludes\classes\class-auxin-master-nav-menu-admin.php:37
filterwp_insert_post_dataincludes\classes\class-auxin-page-template.php:57
filtertemplate_includeincludes\classes\class-auxin-page-template.php:60
filtertheme_page_templatesincludes\classes\class-auxin-page-template.php:63
actionadmin_initincludes\classes\class-auxin-permalink.php:46
actionadmin_initincludes\classes\class-auxin-permalink.php:47
actionload-options-permalink.phpincludes\classes\class-auxin-permalink.php:48
actionadmin_noticesincludes\classes\class-auxin-plugin-requirements.php:42
actionactivated_pluginincludes\classes\class-auxin-plugin-requirements.php:43
actionauxin_after_inner_body_openincludes\classes\class-auxin-plugin-requirements.php:45
actionadmin_initincludes\classes\class-auxin-post-type-base.php:64
actioninitincludes\classes\class-auxin-post-type-base.php:97
actioninitincludes\classes\class-auxin-post-type-base.php:100
filterupload_mimesincludes\classes\class-auxin-svg-support.php:40
filterwp_handle_upload_prefilterincludes\classes\class-auxin-svg-support.php:41
filterwp_check_filetype_and_extincludes\classes\class-auxin-svg-support.php:42
filterwp_prepare_attachment_for_jsincludes\classes\class-auxin-svg-support.php:43
filterwp_get_attachment_image_srcincludes\classes\class-auxin-svg-support.php:44
filteradmin_post_thumbnail_htmlincludes\classes\class-auxin-svg-support.php:45
actionget_image_tagincludes\classes\class-auxin-svg-support.php:46
filterwp_generate_attachment_metadataincludes\classes\class-auxin-svg-support.php:47
filterwp_get_attachment_metadataincludes\classes\class-auxin-svg-support.php:48
filterwp_get_attachment_image_attributesincludes\classes\class-auxin-svg-support.php:49
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:38
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:39
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:40
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:41
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:42
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:43
actionall_admin_noticesincludes\classes\class-auxin-welcome-sections.php:46
actionauxin_admin_before_welcome_section_contentincludes\classes\class-auxin-welcome-sections.php:49
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-welcome-sections.php:52
actionauxin_admin_after_welcome_section_contentincludes\classes\class-auxin-welcome-sections.php:55
actionauxin_admin_after_welcome_section_contentincludes\classes\class-auxin-welcome-sections.php:56
filterauxin_admin_welcome_video_tutorial_listincludes\classes\class-auxin-welcome-sections.php:58
actioninitincludes\classes\class-auxin-welcome.php:107
actioninitincludes\classes\class-auxin-welcome.php:108
filtertgmpa_loadincludes\classes\class-auxin-welcome.php:119
filterwp_redirectincludes\classes\class-auxin-welcome.php:128
actioninitincludes\classes\class-auxin-whitelabel.php:41
actionadmin_menuincludes\classes\class-auxin-whitelabel.php:53
filterauxin_admin_notices_instancesincludes\classes\class-auxin-whitelabel.php:59
filterauxin_display_theme_badgeincludes\classes\class-auxin-whitelabel.php:66
filterwp_prepare_themes_for_jsincludes\classes\class-auxin-whitelabel.php:73
filterauxin_admin_welcome_sectionsincludes\classes\class-auxin-whitelabel.php:93
actioninitincludes\classes\class-auxin-widget-shortcode-map.php:45
actionwidgets_initincludes\classes\class-auxin-widget-shortcode-map.php:52
filterauxin_load_minified_assetsincludes\compatibility\wp-rocket\wp-rocket.php:15
actioninitincludes\compatibility\wp-rocket\wp-rocket.php:18
actionplugins_loadedincludes\elementor\class-auxin-elementor-core-elements.php:106
actioninitincludes\elementor\class-auxin-elementor-core-elements.php:109
actionadmin_noticesincludes\elementor\class-auxin-elementor-core-elements.php:141
actionadmin_noticesincludes\elementor\class-auxin-elementor-core-elements.php:147
actionelementor/elements/categories_registeredincludes\elementor\class-auxin-elementor-core-elements.php:186
actionelementor/widgets/registerincludes\elementor\class-auxin-elementor-core-elements.php:189
actionelementor/controls/registerincludes\elementor\class-auxin-elementor-core-elements.php:190
actionelementor/widgets/widgets_registeredincludes\elementor\class-auxin-elementor-core-elements.php:192
actionelementor/controls/controls_registeredincludes\elementor\class-auxin-elementor-core-elements.php:193
actionelementor/frontend/after_enqueue_stylesincludes\elementor\class-auxin-elementor-core-elements.php:197
actionelementor/frontend/after_register_scriptsincludes\elementor\class-auxin-elementor-core-elements.php:200
actionelementor/editor/before_enqueue_scriptsincludes\elementor\class-auxin-elementor-core-elements.php:203
actionelementor/editor/after_enqueue_scriptsincludes\elementor\class-auxin-elementor-core-elements.php:204
filterelementor/icons_manager/additional_tabsincludes\elementor\class-auxin-elementor-core-elements.php:208
actionauxin_admin_loadedincludes\elementor\class-auxin-elementor-core-elements.php:211
actionauxin_updatedincludes\elementor\class-auxin-elementor-core-elements.php:214
filterelementor/fonts/additional_fontsincludes\elementor\class-auxin-elementor-core-elements.php:217
actionelementor/frontend/column/before_renderincludes\elementor\modules\column.php:17
actionelementor/element/after_section_endincludes\elementor\modules\common.php:22
actionelementor/element/after_section_endincludes\elementor\modules\common.php:25
actionelementor/element/after_section_endincludes\elementor\modules\common.php:26
actionelementor/element/after_section_endincludes\elementor\modules\common.php:28
actionelementor/element/after_section_endincludes\elementor\modules\common.php:29
actionelementor/element/after_section_endincludes\elementor\modules\common.php:30
actionelementor/element/parse_cssincludes\elementor\modules\common.php:38
actionelementor/frontend/container/before_renderincludes\elementor\modules\container.php:17
actionpre_get_postsincludes\elementor\modules\query-control\classes\elementor-post-query.php:47
actionpre_get_postsincludes\elementor\modules\query-control\classes\elementor-post-query.php:51
filterfound_postsincludes\elementor\modules\query-control\classes\elementor-post-query.php:52
actionelementor/ajax/register_actionsincludes\elementor\modules\query-control\module.php:491
actionelementor/controls/registerincludes\elementor\modules\query-control\module.php:494
actionelementor/controls/controls_registeredincludes\elementor\modules\query-control\module.php:496
filterauxin/core_elements/editor/localize_settingsincludes\elementor\modules\query-control\module.php:499
actionpre_get_postsincludes\elementor\modules\query-control\module.php:504
filterfound_postsincludes\elementor\modules\query-control\module.php:505
actionelementor/element/after_section_endincludes\elementor\modules\section.php:23
actionelementor/element/section/section_typo/after_section_endincludes\elementor\modules\section.php:26
actionelementor/documents/register_controlsincludes\elementor\modules\settings\base\manager.php:14
actionelementor/document/after_saveincludes\elementor\modules\settings\base\manager.php:15
actionelementor/document/after_saveincludes\elementor\modules\settings\base\manager.php:16
actioncustomize_save_afterincludes\elementor\modules\settings\base\manager.php:17
actionauxin_demo_import_finishincludes\elementor\modules\settings\base\manager.php:18
actionelementor/documents/registerincludes\elementor\modules\templates-types-manager.php:12
actionelementor/dynamic_tags/registerincludes\elementor\modules\templates-types-manager.php:14
filterthe_contentincludes\elementor\modules\theme-builder\classes\locations-manager.php:30
actiontemplate_redirectincludes\elementor\modules\theme-builder\classes\locations-manager.php:31
filterelementor/admin/create_new_post/metaincludes\elementor\modules\theme-builder\classes\locations-manager.php:32
filterelementor/query_control/get_query_args/current_queryincludes\elementor\modules\theme-builder\classes\preview-manager.php:15
filterelementor/theme/posts_archive/query_posts/query_varsincludes\elementor\modules\theme-builder\classes\preview-manager.php:16
filterelementor/dynamic_tags/post_terms/taxonomy_argsincludes\elementor\modules\theme-builder\classes\preview-manager.php:17
actionelementor/template-library/before_get_source_dataincludes\elementor\modules\theme-builder\classes\preview-manager.php:19
actionelementor/template-library/after_get_source_dataincludes\elementor\modules\theme-builder\classes\preview-manager.php:20
actionelementor/dynamic_tags/before_renderincludes\elementor\modules\theme-builder\classes\preview-manager.php:21
actionelementor/dynamic_tags/after_renderincludes\elementor\modules\theme-builder\classes\preview-manager.php:22
filtermc4wp_form_contentincludes\elementor\widgets\mailchimp.php:809
filterauxin_master_array_shortcodesincludes\elements\about-widget.php:182
filterauxin_master_array_shortcodesincludes\elements\accordion-widget.php:110
filterauxin_master_array_shortcodesincludes\elements\accordion.php:128
filterauxin_master_array_shortcodesincludes\elements\audio.php:143
filterauxin_master_array_shortcodesincludes\elements\before-after.php:158
filterauxin_master_array_shortcodesincludes\elements\button.php:276
filterauxin_master_array_shortcodesincludes\elements\code.php:139
filterauxin_master_array_shortcodesincludes\elements\contact-box.php:331
filterauxin_master_array_shortcodesincludes\elements\contact-form.php:122
filterauxin_master_array_shortcodesincludes\elements\custom-list.php:207
filterauxin_master_array_shortcodesincludes\elements\divider.php:169
filterauxin_master_array_shortcodesincludes\elements\dropcap.php:113
filterauxin_master_array_shortcodesincludes\elements\facebook.php:180
filterauxin_master_array_shortcodesincludes\elements\flickr.php:263
filterauxin_master_array_shortcodesincludes\elements\gallery.php:400
filterauxin_master_array_shortcodesincludes\elements\gmap.php:217
filterauxin_master_array_shortcodesincludes\elements\highlight.php:112
filterauxin_master_array_shortcodesincludes\elements\image.php:383
filterauxin_master_array_shortcodesincludes\elements\instagram-feed.php:302
filterauxin_master_array_shortcodesincludes\elements\latest-posts-slider.php:385
filterauxin_master_array_shortcodesincludes\elements\popular-posts-widget.php:283
filterauxin_master_array_shortcodesincludes\elements\quote.php:176
filterauxin_master_array_shortcodesincludes\elements\recent-posts-grid-carousel.php:766
filterauxin_master_array_shortcodesincludes\elements\recent-posts-land-style.php:403
filterauxin_master_array_shortcodesincludes\elements\recent-posts-masonry.php:433
filterauxin_master_array_shortcodesincludes\elements\recent-posts-tiles-carousel.php:512
filterauxin_master_array_shortcodesincludes\elements\recent-posts-tiles.php:432
filterauxin_master_array_shortcodesincludes\elements\recent-posts-timeline.php:423
filterauxin_master_array_shortcodesincludes\elements\recent-posts-widget.php:243
filterauxin_master_array_shortcodesincludes\elements\recent-products.php:364
filterauxin_master_array_shortcodesincludes\elements\sample-element.php:87
filterauxin_master_array_shortcodesincludes\elements\search.php:72
filterauxin_master_array_shortcodesincludes\elements\socials-list.php:99
filterauxin_master_array_shortcodesincludes\elements\socials-list.php:355
filterauxin_master_array_shortcodesincludes\elements\staff.php:532
filterauxin_master_array_shortcodesincludes\elements\tab-widget.php:180
filterauxin_master_array_shortcodesincludes\elements\tabs.php:128
filterauxin_master_array_shortcodesincludes\elements\testimonial.php:183
filterauxin_master_array_shortcodesincludes\elements\text.php:954
filterauxin_master_array_shortcodesincludes\elements\touch-slider.php:194
filterauxin_master_array_shortcodesincludes\elements\video.php:192
filterpre_get_postsincludes\general-functions.php:1925
actionauxin_after_body_openincludes\general-functions.php:1972
filterwp_get_missing_image_subsizesincludes\general-functions.php:2475
filterbody_classincludes\general-hooks.php:31
filterauxin_defined_option_fields_sectionsincludes\general-hooks.php:1756
actionwp_headincludes\general-hooks.php:1774
actionwp_headincludes\general-hooks.php:1784
filterauxin_custom_js_file_contentincludes\general-hooks.php:1800
actionauxin_after_body_openincludes\general-hooks.php:1811
actionauxin_functions_readyincludes\general-hooks.php:1829
filterlogin_body_classincludes\general-hooks.php:1830
actionauxin_functions_readyincludes\general-hooks.php:1880
actionlogin_headincludes\general-hooks.php:1881
actionauxin_functions_readyincludes\general-hooks.php:1896
filterlogin_headerurlincludes\general-hooks.php:1897
actionauxin_functions_readyincludes\general-hooks.php:1911
filterlogin_headertextincludes\general-hooks.php:1912
actionauxin_functions_readyincludes\general-hooks.php:1938
filterlogin_messageincludes\general-hooks.php:1939
filterauxin_footer_inline_scriptincludes\general-hooks.php:1954
filterwidget_textincludes\general-hooks.php:1986
actionafter_setup_themeincludes\general-hooks.php:1990
actioninitincludes\general-hooks.php:1999
filteruser_contactmethodsincludes\general-hooks.php:2018
filterwp_page_menu_argsincludes\general-hooks.php:2029
actionwp_headincludes\general-hooks.php:2061
actionwoocommerce_paginationincludes\general-hooks.php:2070
actionadmin_initincludes\general-hooks.php:2086
actionauxin_admin_loadedincludes\general-hooks.php:2109
filterauxin_blog_page_template_archive_contentincludes\general-hooks.php:2366
filterauxin_blog_archive_custom_template_layoutsincludes\general-hooks.php:2606
filterwp_titleincludes\general-hooks.php:2638
actionwp_footerincludes\general-hooks.php:2698
actionadmin_footerincludes\general-hooks.php:2699
actionwp_playlist_scriptsincludes\general-hooks.php:2701
actiontemplate_redirectincludes\general-hooks.php:2723
actionauxin_loadedincludes\general-hooks.php:2752
filtertheme_mod_custom_logoincludes\general-hooks.php:2782
filterauxin_secondary_logo_idincludes\general-hooks.php:2811
actionget_headerincludes\general-hooks.php:2827
actionsave_postincludes\general-hooks.php:2840
actionwpincludes\general-hooks.php:2880
actionwoocommerce_sidebarincludes\general-hooks.php:2893
filterwoocommerce_product_get_rating_htmlincludes\general-hooks.php:2923
filterwoocommerce_loop_add_to_cart_argsincludes\general-hooks.php:2944
actioninitincludes\general-hooks.php:2949
actionwoocommerce_shop_loop_item_titleincludes\general-hooks.php:2953
actionauxin_after_inner_body_openincludes\general-hooks.php:2984
actionauxin_before_the_footerincludes\general-hooks.php:2994
actionwpincludes\general-hooks.php:2998
filtersingle_templateincludes\general-hooks.php:3026
filtertemplate_includeincludes\general-hooks.php:3041
filterpost_type_archive_linkincludes\general-hooks.php:3058
filterauxels_version_check_argsincludes\general-hooks.php:3148
actionadmin_bar_menuincludes\general-hooks.php:3153
filterupload_mimesincludes\general-hooks.php:3240
filterwoocommerce_post_classincludes\general-hooks.php:3257
filtertinvwl_wishlist_buttonincludes\general-hooks.php:3277
actionlogin_enqueue_scriptsincludes\general-hooks.php:3290
filterintermediate_image_sizes_advancedincludes\general-hooks.php:3310
actioninitpublic\class-auxels.php:55
actionwpmu_new_blogpublic\class-auxels.php:59
actionafter_setup_themepublic\class-auxels.php:251
actionwp_enqueue_scriptspublic\includes\class-auxels-frontend-assets.php:23
actionwp_enqueue_scriptspublic\includes\class-auxels-frontend-assets.php:24
filterposts_clausespublic\templates\woocommerce\products-grid.php:132
Maintenance & Trust

Shortcodes and extra features for Phlox theme Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 24, 2026
PHP min version7.0
Downloads3.3M

Community Trust

Rating34/100
Number of ratings6
Active installs90K
Developer Profile

Shortcodes and extra features for Phlox theme Developer Profile

averta

6 plugins · 310K total installs

59
trust score
Avg Security Score
71/100
Avg Patch Time
250 days
View full developer profile
Detection Fingerprints

How We Detect Shortcodes and extra features for Phlox theme

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/auxin-elements/public/assets/css/frontend.css/wp-content/plugins/auxin-elements/public/assets/css/skins.css/wp-content/plugins/auxin-elements/public/assets/css/layout.css/wp-content/plugins/auxin-elements/public/assets/js/frontend.js/wp-content/plugins/auxin-elements/includes/assets/css/elementor/elementor.css/wp-content/plugins/auxin-elements/includes/assets/js/elementor/elementor.js/wp-content/plugins/auxin-elements/admin/assets/css/admin.css/wp-content/plugins/auxin-elements/admin/assets/js/admin.js+4 more
Script Paths
/wp-content/plugins/auxin-elements/public/assets/js/frontend.js/wp-content/plugins/auxin-elements/includes/assets/js/elementor/elementor.js/wp-content/plugins/auxin-elements/admin/assets/js/admin.js/wp-content/plugins/auxin-elements/admin/assets/js/wizard.js/wp-content/plugins/auxin-elements/admin/assets/js/options.js/wp-content/plugins/auxin-elements/admin/assets/js/import-export.js+1 more
Version Parameters
auxin-elements/public/assets/css/frontend.css?ver=auxin-elements/public/assets/css/skins.css?ver=auxin-elements/public/assets/css/layout.css?ver=auxin-elements/public/assets/js/frontend.js?ver=auxin-elements/includes/assets/css/elementor/elementor.css?ver=auxin-elements/includes/assets/js/elementor/elementor.js?ver=auxin-elements/admin/assets/css/admin.css?ver=auxin-elements/admin/assets/js/admin.js?ver=auxin-elements/admin/assets/js/wizard.js?ver=auxin-elements/admin/assets/js/options.js?ver=auxin-elements/admin/assets/js/import-export.js?ver=auxin-elements/admin/assets/js/tinymce/plugins/auxin-btns.js?ver=

HTML / DOM Fingerprints

CSS Classes
aux-elements-frontend-widgetaux-element-titleaux-element-descriptionaux-widget-titleaux-widget-descriptionaux-icon-boxaux-accordionaux-tabs
HTML Comments
<!-- Extra features, shortcodes and widgets for themes with auxin framework (i.e Phlox Theme) --><!-- If this file is called directly, abort. --><!-- Abort loading if WordPress is upgrading --><!-- Check plugin requirements -->+7 more
Data Attributes
data-auxin-optionsdata-auxin-widget-settingsdata-elementor-iddata-elementor-typedata-widget_type
JS Globals
AUXELSAuxinAdminAuxinOptionsAuxinWizard
REST Endpoints
/wp-json/auxin-elements/v1/options/wp-json/auxin-elements/v1/admin_settings
Shortcode Output
[auxin_accordion][/auxin_accordion][auxin_tabs][/auxin_tabs]
FAQ

Frequently Asked Questions about Shortcodes and extra features for Phlox theme