PoC Index85,100 CVEs with PoCs

CVE-2025-26936

WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

CRITICAL 10.0EPSS 0.5%

Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects Fresh Framework: from n/a through <= 1.70.0.

Affected
FRESHFACE · Fresh Framework
CVSS v3.1 PATCHSTACK
10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.50% chance of exploitation in the next 30 days, 41st percentile
Published
2025-03-10
Updated
2026-04-28

Proof-of-concept exploits (1)

References

Related