CVE-2024-6828

The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads in versions 4.4.12 through 4.4.17 . The root cause is a lack of authorization and capability checks on the Redux_Color_Scheme_Import function. This flaw allows unauthenticated attackers to upload JSON file...