CVE-2026-74008

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.

We have discovered 11,099 live websites that are affected by CVE-2026-74008.

Run a Free Instant Scan



Affected Software

Product  Auxin Elements
Category Wordpress Plugins
Vulnerable Domains11,099 live websites (100% of Auxin Elements install base)
Vulnerable Versions
  • from 0 through 2.17.22
Vulnerable Versions Count115 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-201 Insertion of Sensitive Information Into Sent Data



Details

  • Published - Aug 18, 2026
  • Updated - Aug 18, 2026

Credits

  • Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-74008
United States2,447 websites


Germany1,067 websites
Italy570 websites
France552 websites
Brazil495 websites
Poland441 websites
Netherlands439 websites
Spain424 websites
GB423 websites
India382 websites

Website Distribution by TLD

Number of websites using CVE-2026-74008
.com4,448 websites
.de544 websites
.com.br475 websites
.it436 websites
.org407 websites
.nl373 websites
.pl342 websites
.fr248 websites
.net208 websites
.co.uk197 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-74008

Top websites that are affected by CVE-2026-74008. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.net United States**,***
*******.io United States**,***
*****.***.za South Africa**,***
***************.fr France**,***
**********.**********.org Germany***,***
**********.nl Netherlands***,***
********.com Belize***,***
*******.eu Netherlands***,***
***********.net Spain***,***
***.***.cz Czech Republic***,***
See full domain list

FAQ

CVE-2026-74008 is Insertion of Sensitive Information Into Sent Data in Auxin Elements
A total of 11,099 websites have been identified as vulnerable to CVE-2026-74008, based on global website indexing conducted by WebTechSurvey.
The Auxin Elements is affected by the CVE-2026-74008 vulnerability.
Auxin Elements versions up to and including 2.17.22 are vulnerable to CVE-2026-74008.