CVE record · 1 source
CVE-2026-103997
CVSS 6.5The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.15.
- Vendor
- Davidanderson
- Product
- Redux Framework
- CVSS v3.1
- 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weakness
- CWE-862
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.15.
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.15. This is due to the plugin not properly verifying that a user is authorized to perform an action. This…