CVE-2026-88999 | davidanderson Redux Framework Plugin up to 4.5.14 on WordPress User Profile wp-admin/profile.php Redux_Users::set_profile authorization

October 1, 2026 Yanac

A vulnerability classified as problematic was found in davidanderson Redux Framework Plugin up to 4.5.14 on WordPress. The impacted element is the function Redux_Users::set_profile of the file wp-admin/profile.php of the component User Profile. Such manipulation leads to authorization bypass.

This vulnerability is documented as CVE-2026-88999. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More