Vulnérabilités connues pour davidanderson Redux Framework
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-110534 | Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Scheme Name | 6.4 Moyenne | 7 nov. 2026 |
| CVE-2026-110705 | Redux Framework <= 4.5.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via download_options AJAX Action | 5.3 Moyenne | 7 nov. 2026 |
| CVE-2026-104812 | Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key | 6.4 Moyenne | 5 nov. 2026 |
| CVE-2026-120533 | Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile | 6.4 Moyenne | 5 nov. 2026 |
| CVE-2026-103997 | Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript | 6.5 Moyenne | 31 oct. 2026 |
| CVE-2026-102918 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and… | 6.4 Moyenne | 30 oct. 2026 |
| CVE-2025-14123 | The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including,… | 6.8 Moyenne | 9 oct. 2026 |
| CVE-2026-90992 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via… | 6.4 Moyenne | 1 oct. 2026 |
| CVE-2026-88999 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,… | 4.3 Moyenne | 1 oct. 2026 |
| CVE-2026-5410 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in… | 6.4 Moyenne | 19 sept. 2026 |
| CVE-2026-5400 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter… | 6.4 Moyenne | 19 sept. 2026 |
| CVE-2026-5399 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User… | 6.4 Moyenne | 10 sept. 2026 |
| CVE-2025-9488 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data’ parameter in all… | 6.4 Moyenne | 13 déc. 2025 |
| CVE-2024-6828 | The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization… | 7.2 Élevée | 23 juil. 2024 |
Autres produits davidanderson
UpdraftPlus: WP Backup & Migration Plugin 4
Internal Link Juicer: SEO Auto Linker for WordPress 3
All-In-One Security (AIOS) – Security and Firewall 2
WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance 2
Easy Updates Manager 1
European VAT Compliance Assistant for WooCommerce 1
Testimonial Slider 1
UpdraftPlus: WordPress Backup & Migration Plugin 1
WPGet API – Connect to any external REST API 1