{"id":"CVE-2025-14123","title":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11","summary":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capabilit…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-269"],"published":"2026-10-09","updated":"2026-10-11","sourceUpdated":"2026-10-11T17:16:55.770","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-14123","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3582185/redux-framework","label":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbe52266-9ee1-47a8-a6df-7057b29e8098?source=cve","label":"security@wordfence.com"}],"tags":["nvd","cve.org"],"epss":0.0023,"epssPercentile":0.13716,"ingestedAt":"2026-10-09T08:29:41.342Z","vendor":"davidanderson","product":"Redux Framework","affected":["redux_framework <= 4.5.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-11T16:38:43.087941Z"},"slug":"CVE-2025-14123","body":"## Overview\n\nThe Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages Redux_Users::set_profile/set_section/set_field.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}