Improper Authentication in Felan Framework Plugin for WordPress

CVE-2025-10850

What is CVE-2025-10850?

The Felan Framework plugin for WordPress contains a vulnerability that allows improper authentication due to hardcoded passwords in its login functions. Specifically, this impacts users who log in using Facebook or Google social login features, as they may remain vulnerable if they did not change their default passwords. Attackers can exploit this flaw to log in as any existing user, thereby potentially gaining unauthorized access to sensitive user data and site functionalities.

References