Plugin icon

Redux Framework

redux-framework

Vulnerabilities:

12

Last Updated:

October 12, 2026

Active Installs:

900000

Published
Title
Fixed in
CVSS
Published
2026-09-30
Title
Redux Framework < 4.5.15 - Subscriber+ Stored XSS via 'user-mediaurl' Media Field
Fixed in
Fixed in 4.5.15
CVSS
6.4 (medium)
Published
2026-09-30
Title
Redux Framework < 4.5.15 - Subscriber+ Arbitrary Attachment Deletion via 'attachment_id' Parameter
Fixed in
Fixed in 4.5.15
CVSS
5.3 (medium)
Published
2026-09-18
Title
Redux Framework < 4.5.14 - Subscriber+ Stored XSS via Spinner Field Input
Fixed in
Fixed in 4.5.14
CVSS
4.6 (medium)
Published
2026-09-18
Title
Redux Framework < 4.5.14 - Subscriber+ Stored XSS via Media Field Filter Values
Fixed in
Fixed in 4.5.14
CVSS
4.6 (medium)
Published
2026-09-09
Title
Redux Framework < 4.5.14 - Subscriber+ Stored XSS via User Profile Slider Field
Fixed in
Fixed in 4.5.14
CVSS
8.0 (high)
Published
2026-06-25
Title
Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator
Fixed in
Fixed in 4.5.13
CVSS
8.8 (high)
Published
2025-12-12
Title
Redux Framework < 4.5.9 - Contributor+ Stored XSS via data Parameter
Fixed in
Fixed in 4.5.9
CVSS
5.9 (medium)
Published
2024-07-22
Title
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Fixed in
Fixed in 4.4.18
CVSS
7.2 (high)
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Contributor+ Arbitrary Plugin Installation and Post Deletion
Fixed in
Fixed in 4.2.13
CVSS
7.1 (high)
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Unauthenticated Sensitive Information Disclosure
Fixed in
Fixed in 4.2.13
CVSS
5.3 (medium)
Published
2020-12-15
Title
Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass
Fixed in
Fixed in 4.1.21
CVSS
4.3 (medium)
Published
2020-12-15
Title
Redux Framework 4.1.22 - 4.1.23 - CSRF Nonce Validation Bypass
Fixed in
Fixed in 4.1.24
CVSS
4.3 (medium)