Vulnerabilities in RiceTheme
5 resultsCVE-2025-10850CRITICALFelan Framework <= 1.1.4 - Hardcoded CredentialsEPSS 0.6%CVE-2025-23504CRITICALWordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerabilityEPSS 0.4%CVE-2025-23993CRITICALWordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-10849MEDIUMFelan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actionsEPSS 0.3%CVE-2025-22741HIGHWordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%