Exposição de Redux Framework

WordPress plugins
43
score de exposição
76.458
sites usam
0
em exploração
0
críticos

CVEs

14 resultados
CVE-2024-6828HIGHRedux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site ScriptingEPSS 1.0%CVE-2026-5400MEDIUMRedux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User InputEPSS 0.4%CVE-2026-12525HIGHRedux Framework < 4.5.13 - Subscriber+ Privilege Escalation to AdministratorEPSS 0.4%CVE-2026-5410MEDIUMRedux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field InputEPSS 0.4%CVE-2026-5399MEDIUMRedux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field ValueEPSS 0.3%CVE-2026-88999MEDIUMRedux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' ParameterEPSS 0.3%CVE-2026-102918MEDIUMRedux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_idEPSS 0.3%CVE-2025-9488MEDIUMRedux Framework <= 4.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via data ParameterEPSS 0.3%CVE-2026-120533MEDIUMRedux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User ProfileEPSS 0.3%CVE-2026-103997MEDIUMRedux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScriptEPSS 0.3%CVE-2026-104812MEDIUMRedux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array KeyEPSS 0.2%CVE-2026-90992MEDIUMRedux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media FieldEPSS 0.2%CVE-2025-14123MEDIUMRedux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users ExtensionEPSS 0.2%CVE-2026-116404MEDIUMWordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerabilityEPSS 0.2%