David Anderson has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.5 (medium).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 6.5
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

redux-framework 2

Follow David Anderson:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

David Anderson vulnerabilities

CVEs affecting David Anderson, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-119472Medium· 6.5

today

WordPress Redux Framework plugin <= 4.5.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Anderson Redux Framework redux-framework allows Stored XSS.This issue affects Redux Framework: from n/a through 4.5.16.

▾ SunlitDavid Anderson · redux-frameworkvia CVEORG

CVE-2026-116404Medium· 6.5

1w ago

WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/a through 4.5.16.

▾ SunlitDavid Anderson · redux-frameworkEPSS 0.20%via CVEORG