Civi Framework
Uxper · 2 CVEs
CVE-2026-65525
MEDIUM
WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
Jul 23, 2026
CVE-2025-49511
HIGH
WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability
Jun 10, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-65525 | WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability | MEDIUM | 0.29% | Jul 23, 2026 |
| CVE-2025-49511 | WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability | HIGH | 0.18% | Jun 10, 2025 |
Showing 1 to 2 of 2 CVEs