Advisories · Technology

David Anderson Redux Framework.

Every CVE that names David Anderson Redux Framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119472 CVE record

CVSS 6.5 Medium

WordPress Redux Framework plugin <= 4.5.16 - Cross Site Scripting (XSS) vulnerability
- David Anderson Redux Framework
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2026
CVE-2026-116404 CVE record

CVSS 6.5 Medium

WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability
- David Anderson Redux Framework
- Broken access control
Not analysed yet 28 Oct 2026