A vulnerability classified as problematic has been found in Shortcodes and extra features for Phlox Theme Plugin up to 2.17.13 on WordPress. Impacted is the function auxels_ajax_search of the component Shortcode Handler. Performing a manipulation results in information disclosure.

This vulnerability is reported as CVE-2025-13215. The attack is possible to be carried out remotely. No exploit exists.