PT-2025-42428
CVE-2025-10850
·
Publicado
2025-10-15
·
Atualizado
2025-10-21
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Felan Framework versions up to and including 1.1.4
Description
The Felan Framework plugin for WordPress has an authentication issue due to hardcoded passwords in the
fb ajax login or register and google ajax login or register functions. This allows unauthenticated attackers to log in as any existing user who registered with Facebook or Google social login and did not change their password.Recommendations
Update Felan Framework to a version newer than 1.1.4.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾