Skip to content
OpenAdvisories

Product · RiceTheme

Felan Framework

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-23993

    WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RiceTheme Felan Framework felan-framework allows SQL Injection.This issue affects Felan Framework: from n/a through <= 1.1.3.

    RiceTheme Felan Framework
  • Critical 9.8
    CVE-2025-23504

    WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in RiceTheme Felan Framework felan-framework allows Authentication Abuse.This issue affects Felan Framework: from n/a through <= 1.1.3.

    RiceTheme Felan Framework
  • Critical 9.8
    CVE-2025-10850

    Felan Framework <= 1.1.4 - Hardcoded Credentials

    The Felan Framework plugin for WordPress is vulnerable to improper authentication in versions up to, and including, 1.1.4. This is due to the hardcoded password in the 'fb_ajax_login_or_register' function and in the 'google_ajax_login_or_register' function. T…

    RiceTheme Felan Framework Web / CMS