Phlox · Security record
Is Phlox safe?
No known vulnerability affects the current version (2.17.22). 1 issue was found in earlier versions and fixed, the latest disclosed on Jan 5, 2026.
Checked 5 days ago against the WPVulnerability database, for version 2.17.22.
How it’s looked after
- Last release
- Aug 1, 2026 (3 months ago)
- Releases in the last year
- 4
- Active installs
- 30K+
1 known vulnerability
- 1 not rated
None affects the current version.
Every known vulnerability in Phlox
Newest first, with any that affect the current version at the top.
Fixed in 2.17.11 · CVE-2025-4776 · Jan 5, 2026 · Wordfence
Questions about Phlox’s security
Is Phlox safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep Phlox updated: most attacks target sites that haven’t updated.
Does Phlox have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 1 older issue, fixed in earlier versions, so keep Phlox up to date.
Is Phlox still maintained?
Yes. Its last release was 3 months ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.