Shortcodes and extra features for Phlox theme

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

70 searches this plugin appeared in over the last 90 days, 8 listed. 62 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 72% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 2 months ago and a band this size takes about a year or more to cross, so the real count is still just under 90K.

1. ★★★★★ keysuck

   8mo ago

   Before I started using Phlox, I read so many mixed reviews, which made me undecisive and hesitant. However, this theme had the best portfolio feature for my use, so I bit the bullet and gave it a go. Maybe my website is too simple to unearth the underlying technical issues, but so far I like the simple, minimal design elements that Phlox offers and how expansive the portfolio is – great for archiving works by a graphic design & printing agency.

   Read on wp.org ↗
2. ★★★★★ johnjmg

   2.3y ago

   damages my website

   Read on wp.org ↗
3. ★★★★★ giuliopanda

   3.7y ago

   The theme stopped working overnight giving the error: fatal error: function auxin_kses doesn’t exist.

   Read on wp.org ↗
4. ★★★★★ neomundi

   4.4y ago

   Always breaks my shop about monthly. DO NOT BUY ANY THEM WITH THIS PLUGIN.

   Read on wp.org ↗
5. ★★★★★ artgali

   5.5y ago

   I saw there were some negative reviews and just want to give my two cents here. I have built a website with the Phlox theme and elements and I am very happy with it. I never have any issues in my nearly one year of using the plugins or theme. There are never any copatibility issues with other plugins either. Frequent updates and fast, Averta makes sure the theme works with latest WordPress changes in matter of hours/days! They are an excellent developer that has made an excellent theme!

   Read on wp.org ↗
6. ★★★★★ millionary

   6.6y ago

   This issue makes it unusable, and apparently nobody even cares to answer or give information in the issue: https://wordpress.org/support/topic/missing-auxin_general_post_types_category_slug-leads-to-php-fatal-error/#post-12679183

   Read on wp.org ↗
7. ★★★★★ johncarteroz

   6.9y ago

   Well, I have used the phlox core plugin before but this time round, it simply breaks my admin and I need to remove the plugin via FTP. I am raising a support ticket and will revise my review when resolved. ***** UPDATE ***** Well, another site and this time it breaks my Theme. (PhLox) config (it simply will not load any theme options). Clearly I need theme options more than a few widgets… I de-activate, theme customisation works… I activate it… the theme breaks. too tired to wait for a solution… Seems to be very buggy!!! This topic was modified 6 years, 4 months ago by johncarteroz.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.17.21 [Fix]: Compatibility and full integration for wpforms added. 2.17.21
2. — Version 2.17.16 [Fix]: Addressed two low-severity security vulnerabilities (CVE-2025-69016, CVE-2026-4291) 2.17.16
3. — Version 2.17.15 [Fix]: An issue with choosing tag type in Elementor “modern heading” element fixed. 2.17.15
4. — Version 2.17.13 [Improvement]: Improved the import of sliders while importing a demo. 2.17.13
5. — Version 2.17.12 [Improvement]: Style generation improvement for footer and header sections. 2.17.12
6. — Version 2.17.10 [Improvement]: Compatibility for Elementor 3.31 added. 2.17.10

1 open vulnerability affects the current version (2.17.24). 22 of 23 disclosed are patched.

1. Open Medium · 5.3 Shortcodes and extra features for Phlox theme <= 2.17.22 - Unauthenticated Information Exposure ↗
   2026-08-17 CVE-2026-74008 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.17.22 No patch available
2. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.22 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-07-01 CVE-2026-57737 Improper Neutralization of Input During Web Page Generation Affects <= 2.17.22 Patched in 2.17.24
3. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget ↗
   2026-01-09 CVE-2025-12379 Improper Neutralization of Input During Web Page Generation Affects <= 2.17.13 Patched in 2.17.14
4. Patched Medium · 5.3 Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure ↗
   2026-01-05 CVE-2025-13215 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.17.13 Patched in 2.17.14
5. Patched Medium · 4.3 Shortcodes and extra features for Phlox <= 2.17.22 - Missing Authorization ↗
   2025-12-27 CVE-2025-69016 Missing Authorization Affects <= 2.17.22 Patched in 2.17.24
6. Patched Medium · 5.3 Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure ↗
   2025-10-26 CVE-2025-63071 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.17.13 Patched in 2.17.14
7. Patched Medium · 4.3 Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization ↗
   2025-01-31 CVE-2024-50500 Missing Authorization Affects <= 2.17.4 Patched in 2.17.5
8. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget ↗
   2024-12-20 CVE-2024-12588 Improper Neutralization of Input During Web Page Generation Affects <= 2.17.2 Patched in 2.17.3
9. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes ↗
   2024-12-20 CVE-2024-9545 Improper Neutralization of Input During Web Page Generation Affects <= 2.17.0 Patched in 2.17.1
10. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets ↗
    2024-10-04 CVE-2024-8486 Improper Neutralization of Input During Web Page Generation Affects <= 2.16.3 Patched in 2.16.4
11. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS ↗
    2024-04-15 CVE-2024-1348 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.7 Patched in 2.15.8
12. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode ↗
    2024-04-15 CVE-2024-3341 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.7 Patched in 2.15.8
13. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' ↗
    2024-04-15 CVE-2024-1396 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.7 Patched in 2.15.8
14. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-15 CVE-2024-1533 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.7 Patched in 2.15.8
15. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget ↗
    2024-04-15 CVE-2024-3517 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.5 Patched in 2.15.6
16. Patched High · 7.5 Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer ↗
    2024-04-15 CVE-2023-7064 Deserialization of Untrusted Data Affects <= 2.17.5 Patched in 2.17.6
17. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode ↗
    2024-04-15 CVE-2024-1357 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.7 Patched in 2.15.8
18. Patched Medium · 4.3 Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization ↗
    2024-03-29 CVE-2024-31099 Missing Authorization Affects <= 2.15.5 Patched in 2.15.8
19. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode ↗
    2023-12-06 CVE-2023-50368 Improper Neutralization of Input During Web Page Generation Affects <= 2.15.4 Patched in 2.15.5
20. Patched Critical · 9.8 Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion ↗
    2023-11-15 CVE-2023-37888 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 2.14.0 Patched in 2.15.0
21. Patched High · 7.2 Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection ↗
    2022-11-17 CVE-2022-3359 Deserialization of Untrusted Data Affects <= 2.10.5 Patched in 2.10.7
22. Patched Medium · 6.4 Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2022-07-12 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.8 Patched in 2.9.14
23. Patched Medium · 5.4 Shortcodes and extra features for Phlox theme <= 2.9.7 - Reflected Cross-Site-Scripting ↗
    2022-06-20 CVE-2022-1910 Improper Neutralization of Input During Web Page Generation Affects < 2.9.8 Patched in 2.9.8

Translated into 14 languages, 5 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-19 90K+ → 80K+ down after 201 days in tier
2. 2026-01-30 100K+ → 90K+ down after 1459 days in tier
3. 2022-02-01 90K+ → 100K+ up after 137 days in tier
4. 2021-09-17 80K+ → 90K+ up after 130 days in tier
5. 2021-05-10 70K+ → 80K+ up after 113 days in tier
6. 2021-01-17 60K+ → 70K+ up after 127 days in tier
7. 2020-09-12 50K+ → 60K+ up after 244 days in tier
8. 2020-01-12 8K+ → 50K+ up after 529 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Shortcodes and extra features for Phlox theme into a readme, a review or a deck. It updates itself.

Shortcodes and extra features for Phlox theme: 80K+ active installs, 2.1★ (7 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/auxin-elements