davidanderson Redux Framework

5 known vulnerabilities in davidanderson Redux Framework, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-90992 CVSS 6.4 medium The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field…
CVE-2026-88999 CVSS 4.3 medium The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to…
CVE-2026-5410 CVSS 6.4 medium The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in versions up to, and…
CVE-2026-5400 CVSS 6.4 medium The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values in versions up to…
CVE-2026-5399 CVSS 6.4 medium The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in…