Vulnerabilities in FRESHFACE

4 results

CVE-2025-26970CRITICALWordPress Ark Theme Core plugin < 1.71.0 - Unauthenticated Remote Code Execution (RCE) vulnerabilityEPSS 0.6%CVE-2025-26936CRITICALWordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2025-26961HIGHWordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-48096MEDIUMWordPress Custom CSS plugin <= 1.4.0 - Broken Access Control vulnerabilityEPSS 0.3%