Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

davidanderson — Vulnerabilities & Security Advisories 25

Browse all 25 CVE security advisories affecting davidanderson. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Davidanderson is primarily associated with web application vulnerabilities, with 11 CVEs recorded across various products. Common vulnerability classes include remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and access control flaws. Security characteristics reveal a pattern of authentication bypass issues and insecure direct object references in legacy systems. No major public incidents have been directly linked to this identifier, though the consistent presence of similar vulnerability types suggests potential systemic weaknesses in development practices. The CVE history indicates a focus on server-side vulnerabilities rather than client-side exploits, with several critical flaws remaining unpatched in older product versions.

Found 12 results / 25 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-120533 Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile — Redux Framework CWE-79 6.4 Medium 2026-11-05
CVE-2026-104812 Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key — Redux Framework CWE-79 6.4 Medium 2026-11-05
CVE-2026-103997 Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript — Redux Framework CWE-862 6.5 Medium 2026-10-31
CVE-2026-102918 Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id — Redux Framework CWE-79 6.4 Medium 2026-10-30
CVE-2025-14123 Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension — Redux Framework CWE-269 6.8 Medium 2026-10-09
CVE-2026-90992 Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field — Redux Framework CWE-79 6.4 Medium 2026-10-01
CVE-2026-88999 Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter — Redux Framework CWE-862 4.3 Medium 2026-10-01
CVE-2026-5410 Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input — Redux Framework CWE-79 6.4 Medium 2026-09-19
CVE-2026-5400 Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input — Redux Framework CWE-79 6.4 Medium 2026-09-19
CVE-2026-5399 Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value — Redux Framework CWE-79 6.4 Medium 2026-09-10
CVE-2025-9488 Redux Framework <= 4.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via data Parameter — Redux Framework CWE-79 6.4 Medium 2025-12-13
CVE-2024-6828 Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting — Redux Framework CWE-434 7.2 High 2024-07-23

This page lists every published CVE security advisory associated with davidanderson. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.