https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:58:01 +0000 https://cve.radiocsirt.org/vuln/cve-2024-6828 <p><strong>Affected:</strong> davidanderson Redux Framework, redux gutenberg_template_library_\&amp;_redux_framework</p> <p>The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can be used to conduct stored cross-site scripting attacks and, in some rare cases, when the wp_filesystem fails to initialize - to Remote Code Execution.</p> <p><strong>Affected:</strong> davidanderson Redux Framework, redux gutenberg_template_library_\&amp;_redux_framework</p> <p>The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can be used to conduct stored cross-site scripting attacks and, in some rare cases, when the wp_filesystem fails to initialize - to Remote Code Execution.</p> https://cve.radiocsirt.org/vuln/cve-2024-6828