CVE-2026-12525

The Redux Framework WordPress plugin (versions before 4.5.13 ) contains a privilege escalation vulnerability. The plugin fails to restrict which user meta keys can be written when saving custom profile fields. Consequently, users with at least a Subscriber role can escalate their privileges to Ad...