CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120533
MEDIUMCVSS 6.4NVD feed
Published 5 November 2026 · tracked since 5 November 2026
Description
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theme_opts Parameter via User Profile in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-92895 HIGH 8.1
- CVE-2026-116624 HIGH 8.8
- CVE-2026-114630 CRITICAL 9.1
- CVE-2026-107622 CRITICAL 9.8
- CVE-2026-104010 HIGH 7.5
- CVE-2026-103479 HIGH 7.6
- CVE-2026-123325 HIGH 7.1
- CVE-2026-123321 HIGH 7.8
- CVE-2026-123306 HIGH 7.4
- CVE-2026-123304 HIGH 7.8