David Anderson vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5		CVE-2026-116404Redux Framework (WordPress plugin) · Missing Authorization Medium6.52026-10-28CVE Database V5CVE-2026-116404 CVE-2026-116404 is a missing authorization vulnerability in the David Anderson Redux Framework up to version 4.5.16. This flaw allows an attacker with limited privileges to lift sensitive data embedded in the cache without proper authorization. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. It does not require user interaction and impacts confidentiality but not integrity or availability. Vulnerability David Anderson	CVE Database V5	2026-10-28
Medium	4.2	EPSS 0.2%	CVE-2026-96825David Anderson / Team Updraft All In One WP Security & Firewall · Authentication Bypass by Spoofing Medium4.2EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96825 Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions. EPSS 0.2%Vulnerability CWE-290	CVE Database V5	2026-09-30
High	7.1	EPSS 0.3%	CVE-2025-23427Redux Converter (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-01-24CVE Database V5CVE-2025-23427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through <= 1.1.3.1. EPSS 0.3%Vulnerability David Anderson / Team Updraft	CVE Database V5	2025-01-24

Page 1 of 1