CVE-2025-10849 | Felan Framework Plugin up to 1.1.4 on WordPress Activation/Deactivation process_plugin_actions authorization

A vulnerability was found in Felan Framework Plugin up to 1.1.4 on WordPress. It has been rated as critical. This impacts the function process_plugin_actions of the component Activation/Deactivation. Performing manipulation results in missing authorization.

This vulnerability is known as CVE-2025-10849. Remote exploitation of the attack is possible. No exploit is available.