CVE-2025-26936

creationtimestamp| type| source ---|---|--- 2025-03-10 15:40:14+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzv6wftjn2y 2025-03-10 15:56:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114138952311367669 2025-03-10 16:44:50+00:00| seen|...

CVE-2025-26936

CVE-2025-26936 is linked to the WordPress Fresh Framework plugin (versions up to 1.70.0). Multiple connected sources confirm an Unauthenticated Remote Code Execution (RCE) vulnerability arising from improper control/generation of code, enabling code injection by unauthenticated attackers. The iss...

CVE-2025-26936 WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects Fresh Framework: from n/a through = 1.70.0...

CVE-2025-26936 WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects Fresh Framework: from n/a through = 1.70.0...