What’s Vulnerable › Products

RiceTheme Felan Framework vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your RiceTheme Felan Framework version is affected

Latest RiceTheme Felan Framework vulnerabilities

• CVE-2025-22741 — WordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-23993 — WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-23504 — WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability (CVSS 9.8)
• CVE-2025-10850 — Felan Framework <= 1.1.4 - Hardcoded Credentials (CVSS 9.8)
• CVE-2025-10849 — Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions (CVSS 5.3)