Davidanderson Redux Framework
2 CVEs affecting Davidanderson Redux Framework. Latest disclosed: 2025-12-13. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6828 | High | 7.2 | 2024-07-23 | The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Col… |
CVE-2025-9488 | Medium | 6.4 | 2025-12-13 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data’ parameter in all versions up to, and including, 4.5.8 due… |