RiceTheme vulnerabilities
5 published CVEs name RiceTheme among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 3Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-22741
WordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
RiceTheme · Felan Framework
High7.1 - CVE-2025-23993
WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability
RiceTheme · Felan Framework
Critical9.3 - CVE-2025-23504
WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability
RiceTheme · Felan Framework
Critical9.8 - CVE-2025-10849
Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions
RiceTheme · Felan Framework
Medium5.3 - CVE-2025-10850
Felan Framework <= 1.1.4 - Hardcoded Credentials
RiceTheme · Felan Framework
Critical9.8