Redux Framework

WordPress plugin · redux-framework · WordPress.org ↗

Latest v4.5.15 Last release Sep 21, 2026 Tested up to WP 7.1.1 900,000+ active installs

Critical

High

Known total

Unfixed

Running Redux Framework on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.8	Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator CVE.org	>=0, <4.5.13	v4.5.13	CVE-2026-12525	Jul 16, 2026
HIGH CVSS 7.2	Redux Framework [redux-framework] < 4.4.18 WPVulnerability	< 4.4.18	v4.4.18	CVE-2024-6828	Jul 22, 2024
MEDIUM CVSS 6.4	Redux Framework [redux-framework] < 4.5.14 WPVulnerability	< 4.5.14	v4.5.14	CVE-2026-5400	Sep 18, 2026
MEDIUM CVSS 6.4	Redux Framework [redux-framework] < 4.5.14 WPVulnerability	< 4.5.14	v4.5.14	CVE-2026-5410	Sep 18, 2026
MEDIUM CVSS 6.4	Redux Framework [redux-framework] < 4.5.14 WPVulnerability	< 4.5.14	v4.5.14	CVE-2026-5399	Jun 25, 2026
MEDIUM CVSS 6.4	Redux Framework [redux-framework] < 4.5.9 WPVulnerability	< 4.5.9	v4.5.9	CVE-2025-9488	Dec 12, 2025
MEDIUM CVSS 6.5	Redux Framework [redux-framework] < 4.2.13 WPVulnerability	< 4.2.13	v4.2.13	CVE-2021-38312	Sep 1, 2021
MEDIUM CVSS 5.3	Redux Framework [redux-framework] < 4.2.13 WPVulnerability	< 4.2.13	v4.2.13	CVE-2021-38314	Sep 1, 2021
UNKNOWN	Redux Framework [redux-framework] < 4.5.13 WPVulnerability	< 4.5.13	v4.5.13	CVE-2026-12525	Jun 25, 2026
UNKNOWN	Redux Framework [redux-framework] < 4.1.21 WPVulnerability	< 4.1.21	v4.1.21	—	Dec 15, 2020
UNKNOWN	Redux Framework [redux-framework] >= 4.1.22 - <= 4.1.23 WPVulnerability	>= 4.1.22, <= 4.1.23	patched	—	Dec 15, 2020
UNKNOWN	Redux Framework [redux-framework] < 4.1.21 WPVulnerability	< 4.1.21	v4.1.21	—	Dec 15, 2020
UNKNOWN	Redux Framework [redux-framework] < 4.1.24 WPVulnerability	< 4.1.24	v4.1.24	—	Dec 15, 2020
UNKNOWN	Redux Framework [redux-framework] < 4.1.21 WPVulnerability	< 4.1.21	v4.1.21	—	Nov 23, 2020
UNKNOWN	Redux Framework [redux-framework] < 4.1.21 WPVulnerability	< 4.1.21	v4.1.21	—	—
UNKNOWN	Redux Framework [redux-framework] < 4.1.24 WPVulnerability	< 4.1.24	v4.1.24	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.