[ Vendor · 4 CVEs ]
davidanderson
CVEs affecting davidanderson published in the last 30 days, plus any davidanderson CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100316 | 17 Oct 2026 | CVSS 7.2 | davidanderson European VAT Compliance Assistant for WooCommerceThe European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in… | |
| CVE-2025-14123 | 9 Oct 2026 | CVSS 6.8 | davidanderson Redux FrameworkThe Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the… | |
| CVE-2026-90992 | 1 Oct 2026 | CVSS 6.4 | davidanderson Redux FrameworkThe Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all… | |
| CVE-2026-88999 | 1 Oct 2026 | CVSS 4.3 | davidanderson Redux FrameworkThe Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin… |