All 6 CVE vulnerabilities found in Redux Framework, with AI-generated Chinese analysis, references, and POCs.
Vendor: davidanderson
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-5410 | Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input CWE-79 | 6.4 | Medium | 2026-09-19 |
| CVE-2026-5400 | Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input CWE-79 | 6.4 | Medium | 2026-09-19 |
| CVE-2026-5399 | Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value CWE-79 | 6.4 | Medium | 2026-09-10 |
| CVE-2026-12525 | Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator | - | - | 2026-07-16 |
| CVE-2025-9488 | Redux Framework <= 4.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via data Parameter CWE-79 | 6.4 | Medium | 2025-12-13 |
| CVE-2024-6828 | Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting CWE-434 | 7.2 | High | 2024-07-23 |
All 6 known CVE vulnerabilities affecting Redux Framework with full Chinese analysis, references, and POCs where available.