Vendor

    Davidanderson

    23 known vulnerabilities in products by Davidanderson, 0 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Davidanderson
    HighCVE-2026-8438

    Davidanderson All-In-One Security (AIOS): Cross-site Scripting

    		7.2
    HighCVE-2026-10795

    Davidanderson UpdraftPlus: Improper Verification of Cryptographic Signature

    		8.1
    HighCVE-2026-7252

    WP-Optimize <= 4.5.2 - Authenticated (Author+) Arbitrary File Deletion via 'original-file' Post Meta

    		8.1
    HighCVE-2024-10957

    UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection

    		8.8
    HighCVE-2024-6828

    Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting

    		7.2
    MediumCVE-2026-5400

    Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input

    		6.4
    HighCVE-2026-100316

    Davidanderson European VAT Compliance Assistant for WooCommerce: Cross-site Scripting

    		7.2
    MediumCVE-2026-5410

    Davidanderson Redux Framework: Cross-site Scripting

    		6.4
    MediumCVE-2025-14123

    Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension

    		6.8
    MediumCVE-2026-5399

    Davidanderson Redux Framework: Cross-site Scripting

    		6.4
    MediumCVE-2026-90992

    Davidanderson Redux Framework: Cross-site Scripting

    		6.4
    MediumCVE-2026-88999

    Davidanderson Redux Framework: Missing Authorization

    		4.3
    MediumCVE-2026-2712

    Incorrect Authorization (CVE-2026-2712)

    		5.4
    MediumCVE-2024-1037

    All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    also in 75 other products

    		6.1
    MediumCVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    also in 152 other products

    		6.3
    MediumCVE-2026-7660

    Easy Updates Manager <= 9.0.20 - Reflected Cross-Site Scripting via 'paged' Parameter

    		6.1
    MediumCVE-2025-9488

    Davidanderson Redux Framework: Cross-site Scripting

    		6.4
    MediumCVE-2025-0215

    UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting

    		6.1
    MediumCVE-2024-4193

    Testimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2024-13857

    WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery

    		5.5
    MediumCVE-2023-5982

    UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update

    also in 1 other product

    		5.4
    MediumCVE-2024-0657

    Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    		4.4

    Products

    Products by Davidanderson
    Redux Framework80
    Updraftplus: Wp Backup & Migration Plugin40
    Internal Link Juicer: Seo Auto Linker For Wordpress30