CyberSecBulletin

Redux Framework vulnerabilities

We track 1 vulnerability in Redux Framework products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Redux Framework vulnerabilities

  • 8.8 High severity

    Redux Framework: Improper Privilege Management

    CVE-2026-12525Redux Framework

    The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by submitting a crafted v