<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: davidanderson-redux-framework</title><description>Every new CVE for davidanderson-redux-framework.</description><link>https://agentprime.io/</link><item><title>CVE-2026-120533: Redux Framework &lt;= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile</title><link>https://agentprime.io/advisories/CVE-2026-120533/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120533/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 04:48:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104812: Redux Framework &lt;= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;multi_media&apos; Field Array Key</title><link>https://agentprime.io/advisories/CVE-2026-104812/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104812/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 04:48:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103997: Redux Framework &lt;= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_&lt;opt_name&gt; JavaScript</title><link>https://agentprime.io/advisories/CVE-2026-103997/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103997/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 31 Oct 2026 07:46:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-102918: Redux Framework &lt;= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id</title><link>https://agentprime.io/advisories/CVE-2026-102918/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102918/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 17:15:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14123: Redux Framework &lt;= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension</title><link>https://agentprime.io/advisories/CVE-2025-14123/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14123/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 07:41:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90992: Redux Framework &lt;= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;user-mediaurl&apos; Media Field</title><link>https://agentprime.io/advisories/CVE-2026-90992/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90992/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 08:28:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88999: Redux Framework &lt;= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via &apos;attachment_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-88999/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88999/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 05:30:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5410: Redux Framework &lt;= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input</title><link>https://agentprime.io/advisories/CVE-2026-5410/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5410/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 Sep 2026 08:27:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5400: Redux Framework &lt;= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input</title><link>https://agentprime.io/advisories/CVE-2026-5400/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5400/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 Sep 2026 07:43:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5399: Redux Framework &lt;= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value</title><link>https://agentprime.io/advisories/CVE-2026-5399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5399/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 09:27:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9488: Redux Framework &lt;= 4.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via data Parameter</title><link>https://agentprime.io/advisories/CVE-2025-9488/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9488/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 04:31:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-6828: Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-6828/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6828/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jul 2024 02:01:39 GMT</pubDate><category>CVE</category></item></channel></rss>