{
    "title": "Redux Framework",
    "seo_title": "Redux Framework: review, purpose and recommended settings",
    "h1": "Redux Framework",
    "description": "Redux Framework: what this options framework required by many themes does, whether to keep it, which settings to apply and which flaws to patch.",
    "lead": "Redux Framework is the options framework many themes use to build their settings panel. Our review helps you decide whether you need it, covers the settings worth applying on a live site and lists the fixed vulnerabilities to know about.",
    "language": "en",
    "locale": "en-US",
    "type": "plugin-sheet",
    "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/",
    "canonical": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/",
    "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/index.md",
    "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/index.json",
    "published": "2026-11-04T08:00:00+00:00",
    "modified": "2026-11-05T21:21:47+00:00",
    "site": {
        "name": "WP Masquerade",
        "url": "https://www.wp-masquerade.com/"
    },
    "translations": [
        {
            "language": "en",
            "hreflang": "en-US",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/index.json"
        },
        {
            "language": "fr",
            "hreflang": "fr-FR",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/redux-framework/index.json"
        },
        {
            "language": "es",
            "hreflang": "es-ES",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/redux-framework/index.json"
        },
        {
            "language": "de",
            "hreflang": "de-DE",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/redux-framework/index.json"
        },
        {
            "language": "it",
            "hreflang": "it-IT",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/redux-framework/index.json"
        },
        {
            "language": "pt",
            "hreflang": "pt-BR",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/redux-framework/index.json"
        },
        {
            "language": "nl",
            "hreflang": "nl-NL",
            "title": "Redux Framework",
            "url": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/redux-framework/",
            "markdown": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/redux-framework/index.md",
            "json": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/redux-framework/index.json"
        }
    ],
    "headings": [
        {
            "level": 1,
            "text": "Redux Framework"
        },
        {
            "level": 2,
            "text": "What Redux Framework does on your site"
        },
        {
            "level": 2,
            "text": "When Redux Framework belongs on a site"
        },
        {
            "level": 2,
            "text": "Redux Framework strengths and weaknesses"
        },
        {
            "level": 3,
            "text": "Strengths"
        },
        {
            "level": 3,
            "text": "Weaknesses"
        },
        {
            "level": 2,
            "text": "The settings we recommend around Redux Framework"
        },
        {
            "level": 2,
            "text": "Redux Framework security: a frequent target with frequent fixes"
        },
        {
            "level": 2,
            "text": "Redux Framework FAQ",
            "id": "faq"
        }
    ],
    "body": "## The essentials\n\n- Best for sites whose theme or plugin needs it to run its options panel.\n- Main caveat: several flaws exploitable by a subscriber were fixed in 2026, so keep it updated.\n- Free with no paid tier: the former Redux Pro features have been included since version 4.4.12.\n\n## What Redux Framework does on your site\n\nOn its own, Redux Framework does nothing: it is a developer toolkit. A theme or plugin loads it to build its options panel (colors, typography, logos, layouts) without coding everything from scratch. Redux sits on top of the WordPress Settings API and provides around fifty field types, metaboxes in the editor, fields on user profiles and taxonomies, Customizer integration, import and export of settings, and automatic output of CSS and Google Fonts links.\n\nIn practice, you almost always install it because a theme asks you to. While it is active, that theme’s options panel works; without it, the panel goes away, as the official description points out. The plugin moves itself to the top of the plugin load order so that its up-to-date copy runs before an older copy bundled with a theme. It also adds three page templates (\"Redux Contained\", \"Redux Full Width\", \"Redux Canvas\") and a Settings > Redux page that shows which themes and plugins rely on it.\n\nRedux is an open-source project (GPL license) created by Kevin Provance and Dovy Paukstys and published under the Redux.io brand; on wordpress.org, the listing is now tied to the account of David Anderson (Team Updraft). There is no paid edition anymore: since version 4.4.12, the changelog states that every feature of the former Redux Pro is part of the free plugin.\n\n![Diagram: Redux Framework works on visitors and bots, wordpress, database and files. Public traces: generator tag (hidden with Pro); folder name (hidden with Pro); tag IDs (hidden with Pro).](https://www.wp-masquerade.com/media/wpm-sheets/redux/diagram-en.svg?v=5e1a57e8)\n\n## When Redux Framework belongs on a site\n\nNobody picks Redux for a visitor-facing feature. It makes sense in three situations:\n\n- **Your theme or a plugin requires it**: by far the most common case, often with commercial themes that show an install notice on first launch.\n- **You build themes or plugins**: a single config file gives you a complete options panel with field validation, conditional sections and generated CSS.\n- **You manage client sites**: exporting the options to a file makes it easy to move from staging to production or to keep a backup before a theme update.\n\nIf nothing uses it, Redux adds nothing: the Settings > Redux page then just offers a demo mode, and you can delete the plugin. If you want to add custom fields to your own content rather than a theme options panel, [ACF](https://www.wp-masquerade.com/features/camouflaged-plugins/advanced-custom-fields/) or [Meta Box](https://www.wp-masquerade.com/features/camouflaged-plugins/meta-box/) are a better fit.\n\n## Redux Framework strengths and weaknesses\n\n### Strengths\n\n- **Completely free.** The former Pro features (Customizer support, extensions such as repeaters and metaboxes) are part of the free plugin.\n- **Nothing to configure.** The plugin has almost no settings of its own: the theme decides what goes into its panel.\n- **Easy to audit.** The Settings > Redux page lists the themes and plugins that depend on Redux before you remove it.\n- **Exportable options.** The \"Import / Export\" section, when the theme displays it, saves all theme settings to a file.\n\n### Weaknesses\n\n- **A string of flaws in 2026.** Between versions 4.5.13 and 4.5.17, several fixes addressed vulnerabilities that a plain subscriber account could exploit.\n- **A dependency that is hard to drop.** Deactivating Redux removes the options panel of any theme that uses it.\n- **Google Fonts served by Google.** If the theme uses Google fonts, Redux loads them from fonts.googleapis.com by default; only the theme developer can change that.\n- **A signature on every page.** Redux adds a `meta name=\"generator\"` tag with its version number to your site’s head.\n\n## The settings we recommend around Redux Framework\n\nRedux has very few settings of its own: most of what matters lives in the panel of the theme that uses it and in a few WordPress settings. Here is what we recommend on a live site.\n\n| Setting | Recommended value | Why |\n| --- | --- | --- |\n| **Automatic updates**  Plugins > Installed Plugins, Redux Framework row | Enabled | The 2026 security fixes shipped only weeks apart. |\n| **Demo mode** (\"Activate Demo Mode\") Settings > Redux | Off (default) | It adds a sample panel that serves no purpose on a real site. |\n| **List of products using Redux**  Settings > Redux | Check it before any removal | If a theme or plugin is listed, removing Redux breaks its options panel. |\n| **Import / Export**  Theme options panel | Export a file before every theme update | You can restore all theme settings in one go if something goes wrong. |\n| **Reset All**  Theme options panel, bottom of the page | Do not use without an export first | The button sets every theme option back to its default. |\n| **Google Fonts update** (\"Automated updates\" or \"one-time update\" notice) Typography field in the panel | \"one-time update\" if you rarely change fonts | The font list is downloaded from the Redux GitHub repository; the automatic option refreshes it without asking. |\n| **New User Default Role**  Settings > General | Subscriber | Several recent Redux flaws required an account: give new users no more rights than they need. |\n| **Anyone can register**  Settings > General | Unchecked unless you need sign-ups | Without open registration, subscriber-level flaws cannot be exploited by a stranger. |\n\n- In Plugins, confirm that Redux Framework is at version 4.5.17 or later.\n- Open Settings > Redux and note the theme or plugins that use it.\n- In the theme panel, export the options and keep the file with your backups.\n- View the source of a page and search for `content=\"Redux`: that is the tag announcing the installed version.\n\n## Redux Framework security: a frequent target with frequent fixes\n\nBecause widely used themes install it, Redux is an attractive target. The most notable published vulnerabilities:\n\n- **CVE-2021-38312, versions 4.2.11 and earlier**: the plugin, then called \"Gutenberg Template Library & Redux Framework\", let a contributor install any plugin from the directory and edit any post through the REST API (CVSS 7.1).\n- **CVE-2021-38314, same versions**: AJAX actions open to unauthenticated users, guarded only by a predictable key, disclosed information about the site (CVSS 5.3).\n- **CVE-2024-6828, versions 4.4.12 to 4.4.17**: an unauthenticated visitor could upload a color scheme JSON file and trigger a stored [XSS vulnerability](https://www.wp-masquerade.com/glossary/xss/), and in rare setups even code execution (CVSS 7.2). Version 4.4.18 fixes the color scheme import.\n- **Versions 4.5.13 to 4.5.17 (June to October 2026)**: the changelog lists a [privilege escalation](https://www.wp-masquerade.com/glossary/privilege-escalation/) in the user profile extension, attachment deletion and options disclosure by a subscriber, and several stored XSS issues.\n\nThe useful move is to let Redux update itself (see our guide to automatic plugin updates) and to delete the plugin once nothing uses it. The Redux generator tag, which reveals the exact version (see [HTML comments and the generator tag](https://www.wp-masquerade.com/html-comments-generator-tag-wordpress/)), is removed by WP Masquerade Pro: bots hunting for vulnerable versions have a harder time spotting it, though that never replaces updating.\n\n## Redux Framework FAQ\n\n**Why doesn’t Redux Framework do anything after I activate it?**\n\nThat is expected: Redux is a development framework waiting for a config file from a theme or plugin. On its own, it only offers a demo mode that shows off its fields.\n\n**Can I delete Redux Framework?**\n\nYes, if the Settings > Redux page lists no theme or plugin that uses it. Otherwise, the options panel of the product in question will stop working until Redux is reactivated.\n\n**Is there a paid version of Redux Framework?**\n\nNo. Since version 4.4.12, the features of the former Redux Pro are included in the free plugin on wordpress.org.\n\n**My theme already bundles Redux: do I also need the plugin?**\n\nIt is not mandatory, but it is often the better choice: the plugin loads before copies bundled in themes, so you get the latest version, and it receives security updates from wordpress.org.\n\n## Key facts\n\n- Category: Builders and themes\n- Vendor: Team Redux (Redux.io)\n- Price: Free (GPL), with no paid edition since the Pro features were merged in version 4.4.12\n- Active installations (wordpress.org): 900 000+\n- Version: 4.5.17\n- Official page: https://wordpress.org/plugins/redux-framework/\n\n## What WP Masquerade hides\n\n- Handled by WP Masquerade Pro only\n- With Pro: generator tag, folder name, tag IDs",
    "catalog": "redux",
    "essentials": [
        "Best for sites whose theme or plugin needs it to run its options panel.",
        "Main caveat: several flaws exploitable by a subscriber were fixed in 2026, so keep it updated.",
        "Free with no paid tier: the former Redux Pro features have been included since version 4.4.12."
    ],
    "format": "application/json"
}