davidanderson
- Total products in the ecosystem
- 9
- Total vulnerabilities (90 days)
- 7
en
CyStack could not complete this security profile. The original vulnerability records remain available below.
As of 10/26/2026, davidanderson recorded 7 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Redux Framework had the most security vulnerabilities in the davidanderson ecosystem, with 6 vulnerabilities—approximately 85.71% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-100316European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry HeaderCVE-2025-14123Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users ExtensionCVE-2026-90992Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media FieldCVE-2026-88999Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' ParameterCVE-2026-5410Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input23 Results | Page 1 of 3
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |