9.8
Critical
CVE-2023-26540 Improper Privilege Management vulnerability in Favethemes Houzez allows Privilege Escalation.This issue affects…
Description
Improper Privilege Management vulnerability in Favethemes Houzez allows Privilege Escalation.This issue affects Houzez: from n/a through 2.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Houzez 2.7 | earliest → 2.7.1 | No fix stated |
Other CVEs of Houzez
The 17 CVEs of Houzez →
CVE-2025-9163
The Houzez theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up…
6.1
Medium
CVE-2025-9191
The Houzez theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.6 via…
6.3
Medium
CVE-2025-62053
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
High
CVE-2025-49952
Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly…
6.5
Medium