G5theme Handmade Framework vulnerabilities

• g5theme handmade framework WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-22520 7.1 HighMarch 25, 2026
• g5theme handmade framework WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability CVE-2026-22521 7.5 HighJanuary 8, 2026