Gutenberg Template Library & Redux Framework
Approved changes feed: RSS · Atom
cpe:2.3:a:redux:gutenberg_template_library_\&_redux_framework:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Redux (b0cfcb77-d119-50d0-b6b7-ad0967bde377) |
|---|---|
| Product | Gutenberg Template Library & Redux Framework (4cc1f876-e402-587a-b5c2-99b88885ba00) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/reduxframework/redux-framework |
purl2cpe | 2026-10-12 21:11:54.808730 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6828 |
vulnerable | 2026-06-08 06:58:20.550038 |
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
HIGH (7.2)
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can be used to conduct stored cross-site scripting attacks and, in some rare cases, when the wp_filesystem fails to initialize - to Remote Code Execution.
Published: 2024-07-23T02:01:39.248Z
Updated: 2024-08-01T21:45:38.314Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.