Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Redux Clear all filters
TI-2021-15921 CVE-2021-38314 · GHSA-h223-3fmj-vhg5

Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure

Priority MEDIUM 47

The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the `includes` function in `redux-core/class-redux-core.php` that were…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.28961 Published 2021-09-02 No fix listed CWE-200
TI-2021-15920 CVE-2021-38312 · GHSA-jgqj-hr6f-2p53

Incorrect authorization in Redux.io Gutenberg Template Library & Redux Framework

Priority LOW 34

The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/cl…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01341 Published 2021-09-02 No fix listed CWE-280