Uxper Civi Framework vulnerabilities

• uxper civi framework WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability CVE-2026-65525 5.3 MediumJuly 23, 2026
• uxper civi framework WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability CVE-2025-49511 7.1 HighJune 10, 2025