Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-23993 EUVD-2026-1548GHSA-7h89-54x4-x67j

WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability

Published Jan 8, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RiceTheme Felan Framework felan-framework allows SQL Injection.This issue affects Felan Framework: from n/a through <= 1.1.3.

Affected products

VendorProductAffectedFixed
RiceTheme Felan Framework ≤ 1.1.3 —

References