WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/a through 4.5.16.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…gin-4-5-16-broken-access-control-vulnerability Diğer

Kayıt geçmişi

1. 28 Eki 2026 16:00Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-50541Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export
• 7,1 CVE-2026-52729Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion
• 8,5 CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verification
• 7,1 CVE-2026-59164NORA missing cross-user token-management authorization
• 7,5 CVE-2026-116393WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability
• 5,4 CVE-2026-116855WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability