FRESHFACE

Products

ProductCVEsExploitedLatest
Fresh Framework2–Mar 15, 2025
Ark Theme Core1–Mar 3, 2025
Custom CSS1–Oct 22, 2025

Exploited and recent CVEs

  • CVE-2025-48096 Medium 6.5 WordPress Custom CSS plugin <= 1.4.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-26961 High 8.6 WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability 0.3%
  • CVE-2025-26936 Critical 10.0 WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerability 0.5%
  • CVE-2025-26970 Critical 10.0 WordPress Ark Theme Core plugin < 1.71.0 - Unauthenticated Remote Code Execution (RCE) vulnerability 0.7%