Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Profile Page Localized Options
- ID
- WPSEC-2026-0911
- Plugin
- Redux Framework (redux-framework)
- Affected
- from 4.4.1 before 4.5.16
- Remediation
- Update to 4.5.16 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-14
- Attack surface
- Redux Framework on WPSec AttackSurface
- Fix released
- Published
Description
The Redux Framework plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.15, due to the Users extension localizing the complete option set and defaults of every Redux panel into the inline redux_<opt_name> JavaScript on user profile pages without checking whether the user can access the options panel. This makes it possible for authenticated attackers with Subscriber-level access and above to read the stored option values of a Redux-based theme or plugin, which may include sensitive values such as API keys, from the source of their own profile page.
References
- https://wpsec.com/vuln/WPSEC-2026-0911/
- https://plugins.svn.wordpress.org/redux-framework/tags/4.5.16/
- https://wordpress.org/plugins/redux-framework/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS