| CVE-2026-24355 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes…
|
6.5
Medium
|
Jan 22, 2026 |
| CVE-2025-62057 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes…
|
7.1
High
|
Nov 6, 2025 |
| CVE-2025-62054 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
7.5
High
|
Oct 22, 2025 |
| CVE-2025-62058 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes…
|
6.5
Medium
|
Oct 22, 2025 |
| CVE-2024-5793 |
The Houzez Theme - Functionality plugin for WordPress is vulnerable to SQL Injection via the ‘currency_code’ parameter…
|
8.8
High
|
Jul 9, 2024 |