{"vulnerability": "CVE-2026-12525", "sightings": [{"uuid": "99d8bbb5-27bd-401a-908c-10f4971b26fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqsqf6ncd2e", "content": "CVE-2026-12525 - Redux Framework\nCVE ID : CVE-2026-12525\n \n Published : July 16, 2026, 7:16 a.m. | 18\u00a0minutes ago\n \n Description : The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowi...", "creation_timestamp": "2026-07-16T08:24:55.004573Z"}, {"uuid": "3a739814-626d-42d1-880a-7e66a0c2bbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12525", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116928835008172741", "content": "CVE-2026-12525: Redux Framework &lt;4.5.13 (WordPress) allows Subscribers to escalate to Admin by abusing the user-profile extension. Severity: CRITICAL. Disable the feature or restrict editing until a patch lands. https://radar.offseq.com/threat/cve-2026-12525-cwe-269-improper-privilege-manageme-e022e7bb11713010 #OffSeq #WordPress #CVE202612525 #PrivilegeEscalation", "creation_timestamp": "2026-07-16T09:00:29.531758Z"}, {"uuid": "e9eab2fa-0282-4d17-8b78-359f831dd996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12525", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqquq24rdu24", "content": "Redux Framework &lt;4.5.13 (WordPress) has a CRITICAL flaw: Subscribers can become Admins via crafted profile updates if user-profile is enabled. Disable feature or restrict roles until patched. https://radar.offseq.com/threat/cve-2026-12525-cwe-269-improper-privilege-manageme-e022e7bb11713010 #OffS...", "creation_timestamp": "2026-07-16T09:00:31.345031Z"}]}