UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-102918

Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id

Severity
Medium 6.4
Published
30 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Redux Framework (WordPress plugin)WordPress plugins · wp-plugin:redux-framework
  • Every version up to 4.5.15

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-102918