Skip to content
PluginCanary

Redux Framework

by David Anderson / Team Updraft · 900,000+ active installs · Checked 3 Nov 2026
Healthy9 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 4.5.16.

81/ 100 Canary Score
Sub-scores for Redux Framework
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.5.16. Update to version 4.5.16 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.5.16. Update to version 4.5.16 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 4.5.17. Update to version 4.5.17 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 4.5.13. Update to version 4.5.13 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 4.5.15. Update to version 4.5.15 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 4.5.15. Update to version 4.5.15 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.14. Update to version 4.5.14 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.14. Update to version 4.5.14 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 9 Sep 2026, fixed in 4.5.14. Update to version 4.5.14 or later.9 Sep 2026Evidence
  • InfoSEC-311 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
dovyp24 Oct 2013 to 23 May 2024, 379 commits
KProvance6 Feb 2018 to 26 Nov 2025, 40 commits
munirkamal22 Jun 2021 to 22 Jun 2021, 1 commits
reduxio28 Oct 2024 to 2 Nov 2026, 16 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 days ago
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Redux Framework
Q1 20244
Q2 20242
Q3 20241
Q4 20245
Q1 20252
Q2 20250
Q3 20250
Q4 20252
Q1 20262
Q2 20261
Q3 20262
Q4 20262

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript6.5<= 4.5.154.5.160
30 Oct 2026Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id6.4<= 4.5.154.5.160
26 Oct 2026Redux Framework <= 4.5.16 - Missing Authorization4.3<= 4.5.164.5.177
8 Oct 2026Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension6.8<= 4.5.114.5.130
30 Sep 2026Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field6.4<= 4.5.144.5.150
30 Sep 2026Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter4.3<= 4.5.144.5.150
18 Sep 2026Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input6.4<= 4.5.134.5.140
18 Sep 2026Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input6.4<= 4.5.134.5.140
9 Sep 2026Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value6.4<= 4.5.13.14.5.140
25 Jun 2026Redux Framework <= 4.5.12 - Authenticated (Subscriber+) Privilege Escalation8.8<= 4.5.124.5.130
12 Dec 2025Redux Framework <= 4.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via data Parameter6.4<= 4.5.84.5.90
22 Jul 2024Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting7.24.4.12 to 4.4.174.4.180
1 Sep 2021Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure5.3<= 4.2.114.2.13507
1 Sep 2021Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion7.1<= 4.2.124.2.13507
15 Dec 2020Gutenberg Template Library & Redux Framework <= 4.1.23 - Cross-Site Request Forgery5.3< 4.1.244.1.24767
23 Nov 2020Gutenberg Template and Pattern Library & Redux Framework <= 4.1.20 - Cross-Site Request Forgery8.8<= 4.1.204.1.21789

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Redux Framework
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q3 20242.3
Q4 20245.0
Q2 20253.0
Q3 20255.0
Q1 20264.0

Average rating fell from 5.0 to 4.0 between Q4 2023 and Q1 2026.

Rating distribution
5 star224
4 star7
3 star2
2 star5
1 star35
Latest low reviews

Momentum

900,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Redux Framework
4 May 202614,360
11 May 202625,608
18 May 202647,027
25 May 202625,701
1 Jun 202622,020
8 Jun 202621,077
15 Jun 202620,070
22 Jun 2026200,629
29 Jun 202644,288
6 Jul 202659,302
13 Jul 202631,309
20 Jul 202629,614
27 Jul 202651,111
3 Aug 202641,073
10 Aug 202624,598
17 Aug 202621,240
24 Aug 202620,082
31 Aug 202619,318
7 Sep 2026198,429
14 Sep 202666,149
21 Sep 2026235,384
28 Sep 202643,479
5 Oct 202634,543
12 Oct 2026192,339
19 Oct 202648,858
26 Oct 202664,426
2 Nov 202683,001

Weekly downloads over the last 4 weeks are 56% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

MCP AdapterScore 93 · 60,000+WP-SCSSScore 93 · 40,000+Show Pages IDsScore 93 · 10,000+WP ResetScore 92 · 300,000+Query MonitorScore 91 · 200,000+

Facts

Version4.5.17
AuthorDavid Anderson / Team Updraft
Added24 Oct 2013
Last updated2 Nov 2026
Active installs900,000+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP7.4
CategoryDeveloper Tools & Customization > Code Snippets & Custom Code
Tagsadmin, options, theme options, plugin options, options framework

Other plugins by this author: UpdraftPlus: WP Backup & Migration Plugin, All-In-One Security (AIOS) - Security and Firewall, WP-Optimize - Cache, Compress images, Minify & Clean database to boost page speed & performance, Easy Updates Manager, Internal Link Juicer: SEO Auto Linker for WordPress, Two Factor Authentication, WPGet API - Connect to any external REST API, Upload Larger Plugins, UpdraftCentral Dashboard, European VAT Compliance Assistant for WooCommerce, Testimonial Slider, Use Administrator Password

Questions

Is Redux Framework still maintained?

Redux Framework was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is Redux Framework safe?

Redux Framework has no open unpatched vulnerabilities on record. 11 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Redux Framework?

The wordpress.org author is David Anderson / Team Updraft. Recent committers: reduxio, KProvance, dovyp, munirkamal, ghost1227. We have recorded no ownership change.

What can I use instead of Redux Framework?

Plugins in the same category with a higher Canary Score: MCP Adapter, WP-SCSS, Show Pages IDs, WP Reset, Query Monitor.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue