CVE-2026-90992

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CLEANSTART-2024-MI55100 Use after free in UI framework in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in UI framework in Google Chrome prior to 92...

CVE-2026-90992

The Redux Framework plugin for WordPress (versions up to and including 4.5.14 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping during the 'User Meta Merge' process via the 'user-mediaurl' media field. Authenticated attack...

CVE-2026-90992 Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2026-90992 Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

EUVD-2026-90562

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

WordPress Redux Framework plugin <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Attachment Deletion vulnerability discovered by Eunho Kim in WordPress Plugin Redux Framework versions = 4.5.14...

METIS

METIS - Marco Modular de Explotación e Inteligencia de Amenazas ███╗ ███╗███████╗████████╗██╗███████╗ ████╗ ████║██╔════╝╚══██╔══╝██║██╔════╝ ██╔████╔██║█████╗ ██║ ██║███████╗ ██║╚██╔╝██║██╔══╝ ██║ ██║╚════██║ ██║ ╚═╝ ██║███████╗ ██║ ██║███████║ ╚═╝ ╚═╝╚══════╝ ╚═╝ ╚═╝╚══════╝ Un marco de...

CLEANSTART-2025-RR05020 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2024-43484 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-OA94377 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2024-43483 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-KL68323 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2024-38081 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-BH85010 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2024-21409 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-FE50155 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-36049 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-IL60395 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2023-29331 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-YT42568 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-24936 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2024-HC22129 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2023-24897 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2024-SK69505 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2023-24895 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2024-TX40015 .NET Framework Remote Code Execution Vulnerability

CVE-2022-41089 affects multiple packages. . See references for individual vulnerability details...

CVE-2026-88999

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

EUVD-2026-90501

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...