davidanderson vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20245
3. 20254
4. 202617

Newest CVEs

• CVE-2026-120533

  Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile

  davidanderson · Redux Framework

  Medium6.4
• CVE-2026-104812

  Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key

  davidanderson · Redux Framework

  Medium6.4
• CVE-2026-103997

  Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript

  davidanderson · Redux Framework

  Medium6.5
• CVE-2026-102918

  Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id

  davidanderson · Redux Framework

  Medium6.4
• CVE-2026-100316

  European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry Header

  davidanderson · European VAT Compliance Assistant for WooCommerce

  High7.2
• CVE-2025-14123

  Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension

  davidanderson · Redux Framework

  Medium6.8
• CVE-2026-90992

  Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field

  davidanderson · Redux Framework

  Medium6.4
• CVE-2026-88999

  Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter

  davidanderson · Redux Framework

  Medium4.3
• CVE-2026-5410

  Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input

  davidanderson · Redux Framework

  Medium6.4
• CVE-2026-5400

  Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input

  davidanderson · Redux Framework

  Medium6.4