Lucene search

CVE-2024-6828

🗓️ 23 Jul 2024 02:02:15Reported by WordfenceType

The Redux Framework plugin for WordPress allows unauthenticated JSON file uploads, leading to potential stored cross-site scripting and Remote Code Execution in certain scenarios

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2024-6828	23 Jul 202402:15	–	nvd
Vulnrichment	CVE-2024-6828 Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting	23 Jul 202402:01	–	vulnrichment
RedhatCVE	CVE-2024-6828	5 Feb 202502:49	–	redhatcve
Cvelist	CVE-2024-6828 Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting	23 Jul 202402:01	–	cvelist
Patchstack	WordPress Redux Framework Plugin <= 4.4.17 is vulnerable to Cross Site Scripting (XSS)	22 Jul 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024)	1 Aug 202414:18	–	wordfence

Vulners

Vulnrichment

Node

davidanderson redux_frameworkRange4.4.12–4.4.17wordpress

[
  {
    "vendor": "davidanderson",
    "product": "Redux Framework",
    "versions": [
      {
        "version": "4.4.12",
        "status": "affected",
        "lessThanOrEqual": "4.4.17",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
core	www.core.trac.wordpress.org/browser/tags/6.5.4/src/wp-includes/class-wp-theme-json.php
plugins	www.plugins.trac.wordpress.org/browser/redux-framework/tags/4.4.17/redux-core/inc/fields/typography/redux-typography.js
plugins	www.plugins.trac.wordpress.org/browser/redux-framework/trunk/redux-core/inc/classes/class-redux-filesystem.php
plugins	www.plugins.trac.wordpress.org/browser/redux-framework/tags/4.4.17/redux-core/inc/extensions/color_scheme/color_scheme/class-redux-color-scheme-import.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/18a37063-31aa-4b1f-b1a5-1ea921a20686
plugins	www.plugins.trac.wordpress.org/browser/redux-framework/tags/4.4.17/redux-core/inc/classes/class-redux-helpers.php
plugins	www.plugins.trac.wordpress.org/browser/redux-framework/tags/4.4.17/redux-core/inc/classes/class-redux-filesystem.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jul 2024 02:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS37.2

EPSS0.00626

SSVC

CWE-434