{"schema":"threatline.record/2","record":{"id":"CVE-2026-116404","aliases":[],"summary":"WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability","details":"Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/a through 4.5.16.","categories":["Unclassified"],"product":"Redux Framework","vendor":"David Anderson","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116404","source_modified_at":"2026-10-28T13:00:27.971Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":"Redux Framework","vendor":"David Anderson","versions":[{"version":"0","versionType":"custom","status":"affected","lessThanOrEqual":"4.5.16"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":6.5,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T13:00:27.971Z","modified_at":"2026-10-28T13:00:27.971Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-116404","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T13:00:27.971Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://patchstack.com/database/wordpress/plugin/redux-framework/vulnerability/wordpress-redux-framework-plugin-4-5-16-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T13:00:27.971Z","content_hash":"3cb5baa6ff3299b8967ad276d597259d7a00db0d6b013f7422d5f187ecd95dff"}}