CVE-2025-23504 | RiceTheme Felan Framework Plugin up to 1.1.3 on WordPress authentication bypass

January 8, 2026 Yanac

A vulnerability classified as critical was found in RiceTheme Felan Framework Plugin up to 1.1.3 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to authentication bypass using alternate channel.

This vulnerability is registered as CVE-2025-23504. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More