Freshface

4 CVEs in 3 Freshface products, including Fresh Framework, Ark Theme Core, Custom CSS. Newest: CVE-2025-48096 (2025-10-22).

Freshface products with known CVEs

ProductCVEs
Fresh Framework2
Ark Theme Core1
Custom CSS1
Freshface CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-48096Medium6.52025-10-22Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2025-26961High8.62025-03-15Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff…
CVE-2025-26936Critical10.02025-03-10Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects F…
CVE-2025-26970Critical10.02025-03-03Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme…