CVE-2025-10849

creationtimestamp| type| source ---|---|--- 2025-10-16 07:16:32+00:00| seen| Telegram/tmrkgbN5iW87BcS7x7La27KoXysWoVRDLuPu7fQRwAflg0...

WordPress Felan Framework plugin <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Activation/Deactivation via processpluginactions vulnerability discovered by István Márton in WordPress Plugin Felan Framework versions = 1.1.4...