Vulnerabilities / Redux Framework
Redux Framework vulnerabilities
Advisories WPSec published for Redux Framework. Other sources may list more. Its attack surface: Redux Framework on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0911 | Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Profile Page Localized Options | Medium 4.3 | 4.5.16 |
| 2026-10-14 | WPSEC-2026-0910 | Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field File URL | Medium 6.4 | 4.5.16 |
| 2026-10-14 | WPSEC-2026-0909 | Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Missing Authorization to Restricted Profile Field Update via 'checkuser_id' Parameter | Medium 4.3 | 4.5.16 |
License: CC BY 4.0