| CVE-2025-9163 |
The Houzez theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up…
|
6.1
Medium
|
Nov 26, 2025 |
| CVE-2025-9191 |
The Houzez theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.6 via…
|
6.3
Medium
|
Nov 26, 2025 |
| CVE-2025-62053 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
High
|
Nov 6, 2025 |
| CVE-2025-49952 |
Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly…
|
6.5
Medium
|
Oct 22, 2025 |
| CVE-2025-49407 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes…
|
8.8
High
|
Aug 28, 2025 |
| CVE-2025-49405 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
4.3
Medium
|
Aug 28, 2025 |
| CVE-2025-49406 |
Missing Authorization vulnerability in favethemes Houzez allows Accessing Functionality Not Properly Constrained by ACLs
|
8.5
High
|
Aug 20, 2025 |
| CVE-2025-53198 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
High
|
Aug 20, 2025 |
| CVE-2025-53997 |
Missing Authorization vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access…
|
4.3
Medium
|
Jul 16, 2025 |
| CVE-2025-24747 |
Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through <= 3.4.0
|
5.3
Medium
|
Jan 27, 2025 |
| CVE-2025-24754 |
Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through <= 3.4.0
|
4.3
Medium
|
Jan 27, 2025 |
| CVE-2024-22303 |
Incorrect Privilege Assignment vulnerability in favethemes Houzez allows Privilege Escalation.This issue affects Houzez:…
|
8.8
High
|
Sep 17, 2024 |
| CVE-2024-21743 |
Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez…
|
8.8
High
|
Sep 17, 2024 |
| CVE-2024-43244 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
|
7.1
High
|
Aug 18, 2024 |
| CVE-2024-5793 |
The Houzez Theme - Functionality plugin for WordPress is vulnerable to SQL Injection via the ‘currency_code’ parameter…
|
8.8
High
|
Jul 9, 2024 |
| CVE-2023-26540 |
Improper Privilege Management vulnerability in Favethemes Houzez allows Privilege Escalation.This issue affects…
|
9.8
Critical
|
May 17, 2024 |
| CVE-2023-26009 |
Improper Privilege Management vulnerability in Favethemes Houzez Login Register allows Privilege Escalation.This issue…
|
9.8
Critical
|
May 17, 2024 |