Log in Start free

RiceTheme

Products

ProductCVEsExploitedLatest
Felan Framework5–May 27, 2026

Exploited and recent CVEs

  • CVE-2025-22741 High 7.1 WordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-23993 Critical 9.3 WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability 0.4%
  • CVE-2025-23504 Critical 9.8 WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability 0.5%
  • CVE-2025-10849 Medium 5.3 Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions 0.3%
  • CVE-2025-10850 Critical 9.8 Felan Framework <= 1.1.4 - Hardcoded Credentials 0.6%