redux-framework vulnerabilities

CVEs whose affected-version data names the redux-framework package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-119472Medium· 6.5

today

WordPress Redux Framework plugin <= 4.5.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Anderson Redux Framework redux-framework allows Stored XSS.This issue affects Redux Framework: from n/a through 4.5.16.

▾ SunlitDavid Anderson · redux-frameworkvia CVEORG

CVE-2026-116404Medium· 6.5

1w ago

WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/a through 4.5.16.

▾ SunlitDavid Anderson · redux-frameworkEPSS 0.20%via CVEORG