Shortcodes and extra features for Phlox theme

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 72% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ keysuck

   5mo ago

   Before I started using Phlox, I read so many mixed reviews, which made me undecisive and hesitant. However, this theme had the best portfolio feature for my use, so I bit the bullet and gave it a go. Maybe my website is too simple to unearth the underlying technical issues, but so far I like the simple, minimal design elements that Phlox offers and how expansive the portfolio is – great for archiving works by a graphic design & printing agency.

   Read on wp.org ↗
2. ★★★★★ johnjmg

   2.1y ago

   damages my website

   Read on wp.org ↗
3. ★★★★★ giuliopanda

   3.5y ago

   The theme stopped working overnight giving the error: fatal error: function auxin_kses doesn’t exist.

   Read on wp.org ↗
4. ★★★★★ neomundi

   4.2y ago

   Always breaks my shop about monthly. DO NOT BUY ANY THEM WITH THIS PLUGIN.

   Read on wp.org ↗
5. ★★★★★ artgali

   5.3y ago

   I saw there were some negative reviews and just want to give my two cents here. I have built a website with the Phlox theme and elements and I am very happy with it. I never have any issues in my nearly one year of using the plugins or theme. There are never any copatibility issues with other plugins either. Frequent updates and fast, Averta makes sure the theme works with latest WordPress changes in matter of hours/days! They are an excellent developer that has made an excellent theme!

   Read on wp.org ↗
6. ★★★★★ millionary

   6.4y ago

   This issue makes it unusable, and apparently nobody even cares to answer or give information in the issue: https://wordpress.org/support/topic/missing-auxin_general_post_types_category_slug-leads-to-php-fatal-error/#post-12679183

   Read on wp.org ↗
7. ★★★★★ johncarteroz

   6.7y ago

   Well, I have used the phlox core plugin before but this time round, it simply breaks my admin and I need to remove the plugin via FTP. I am raising a support ticket and will revise my review when resolved. ***** UPDATE ***** Well, another site and this time it breaks my Theme. (PhLox) config (it simply will not load any theme options). Clearly I need theme options more than a few widgets… I de-activate, theme customisation works… I activate it… the theme breaks. too tired to wait for a solution… Seems to be very buggy!!! This topic was modified 6 years, 4 months ago by johncarteroz.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.17.21 [Fix]: Compatibility and full integration for wpforms added. 2.17.21
2. — Version 2.17.16 [Fix]: Addressed two low-severity security vulnerabilities (CVE-2025-69016, CVE-2026-4291) 2.17.16
3. — Version 2.17.15 [Fix]: An issue with choosing tag type in Elementor “modern heading” element fixed. 2.17.15
4. — Version 2.17.13 [Improvement]: Improved the import of sliders while importing a demo. 2.17.13
5. — Version 2.17.12 [Improvement]: Style generation improvement for footer and header sections. 2.17.12
6. — Version 2.17.10 [Improvement]: Compatibility for Elementor 3.31 added. 2.17.10

22 disclosed vulnerabilities on record for this plugin, 2 still affect the current version.

1. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.21 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-07-01 CVE-2026-57737 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.17.21 No patch available
2. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget ↗
   2026-01-09 CVE-2025-12379 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.17.13 Patched in 2.17.14
3. Medium · 5.3 Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure ↗
   2026-01-05 CVE-2025-13215 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.17.13 Patched in 2.17.14
4. Medium · 4.3 Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization ↗
   2025-12-27 CVE-2025-69016 Missing Authorization Affects <= 2.17.14 No patch available
5. Medium · 5.3 Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure ↗
   2025-10-26 CVE-2025-63071 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.17.13 Patched in 2.17.14
6. Medium · 4.3 Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization ↗
   2025-01-31 CVE-2024-50500 Missing Authorization Affects <= 2.17.4 Patched in 2.17.5
7. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget ↗
   2024-12-20 CVE-2024-12588 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.17.2 Patched in 2.17.3
8. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes ↗
   2024-12-20 CVE-2024-9545 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.17.0 Patched in 2.17.1
9. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets ↗
   2024-10-04 CVE-2024-8486 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.16.3 Patched in 2.16.4
10. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS ↗
    2024-04-15 CVE-2024-1348 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.7 Patched in 2.15.8
11. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode ↗
    2024-04-15 CVE-2024-3341 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.7 Patched in 2.15.8
12. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' ↗
    2024-04-15 CVE-2024-1396 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.7 Patched in 2.15.8
13. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-15 CVE-2024-1533 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.7 Patched in 2.15.8
14. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget ↗
    2024-04-15 CVE-2024-3517 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.5 Patched in 2.15.6
15. High · 7.5 Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer ↗
    2024-04-15 CVE-2023-7064 Deserialization of Untrusted Data Affects <= 2.17.5 Patched in 2.17.6
16. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode ↗
    2024-04-15 CVE-2024-1357 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.7 Patched in 2.15.8
17. Medium · 4.3 Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization ↗
    2024-03-29 CVE-2024-31099 Missing Authorization Affects <= 2.15.5 Patched in 2.15.8
18. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode ↗
    2023-12-06 CVE-2023-50368 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.15.4 Patched in 2.15.5
19. Critical · 9.8 Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion ↗
    2023-11-15 CVE-2023-37888 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 2.14.0 Patched in 2.15.0
20. High · 7.2 Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection ↗
    2022-11-17 CVE-2022-3359 Deserialization of Untrusted Data Affects <= 2.10.5 Patched in 2.10.7
21. Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2022-07-12 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.8 Patched in 2.9.14
22. Medium · 5.4 Shortcodes and extra features for Phlox theme <= 2.9.7 - Reflected Cross-Site-Scripting ↗
    2022-06-20 CVE-2022-1910 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.9.8 Patched in 2.9.8

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 14 languages, 5 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-19 90K+ → 80K+ down after 201 days in tier
2. 2026-01-30 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Premium Portfolio Features for Phlox theme 40K+ installs · 4.0★ · 3 shared tags B
• Fullwidth Templates for Any Theme & Page Builder 20K+ installs · 4.5★ · 2 shared tags A
• Elementor Website Builder – more than just a page builder 10M+ installs · 4.5★ · 1 shared tag A
• Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder 2M+ installs · 4.9★ · 1 shared tag A
• Essential Addons for Elementor – Popular Elementor Templates & Widgets 1M+ installs · 4.9★ · 1 shared tag A
• Starter Templates – AI-Powered Templates for Elementor & Gutenberg 1M+ installs · 4.9★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Shortcodes and extra features for Phlox theme into a readme, a review or a deck. It updates itself.

Shortcodes and extra features for Phlox theme: 80K+ active installs, 2.1★ (7 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/auxin-elements