CVE-2026-102918

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.5.15 via the multimedia field. This is due to the field's renderer printing the stored value into an href attribute, a hidden input value and an HTML element without...