WordPress Redux Framework Plugin <= 4.1.20 is vulnerable to Bypass Vulnerability

Low priority Mitigation unnecessary

<= 4.1.20Vulnerable version(s)

4.1.21Fixed version

15 Dec, 2020

Get the fastest vulnerability mitigation with Patchstack!

CVSS 5.4

A bypass vulnerability could allow a malicious actor to bypass certain restrictions in the code.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 4.1.21 or later to remove the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Have additional information or questions about this entry? Let us know.

Go to

Reported by Profile Image

28 Nov, 2022