RiceTheme Felan Framework

• CVE-2025-22741 High 7.1 WordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-23993 Critical 9.3 WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability 0.4%
• CVE-2025-23504 Critical 9.8 WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability 0.5%
• CVE-2025-10849 Medium 5.3 Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions 0.3%
• CVE-2025-10850 Critical 9.8 Felan Framework <= 1.1.4 - Hardcoded Credentials 0.6%