| CVE-2025-9163 |
The Houzez theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up…
|
6.1
Moyenne
|
26 nov. 2025 |
| CVE-2025-9191 |
The Houzez theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.6 via…
|
6.3
Moyenne
|
26 nov. 2025 |
| CVE-2025-62053 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
Élevée
|
6 nov. 2025 |
| CVE-2025-49952 |
Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly…
|
6.5
Moyenne
|
22 oct. 2025 |
| CVE-2025-49407 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes…
|
8.8
Élevée
|
28 août 2025 |
| CVE-2025-49405 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
4.3
Moyenne
|
28 août 2025 |
| CVE-2025-49406 |
Missing Authorization vulnerability in favethemes Houzez allows Accessing Functionality Not Properly Constrained by ACLs
|
8.5
Élevée
|
20 août 2025 |
| CVE-2025-53198 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
Élevée
|
20 août 2025 |
| CVE-2025-53997 |
Missing Authorization vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access…
|
4.3
Moyenne
|
16 juil. 2025 |
| CVE-2025-24747 |
Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through <= 3.4.0
|
5.3
Moyenne
|
27 janv. 2025 |
| CVE-2025-24754 |
Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through <= 3.4.0
|
4.3
Moyenne
|
27 janv. 2025 |
| CVE-2024-22303 |
Incorrect Privilege Assignment vulnerability in favethemes Houzez allows Privilege Escalation.This issue affects Houzez:…
|
8.8
Élevée
|
17 sept. 2024 |
| CVE-2024-21743 |
Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez…
|
8.8
Élevée
|
17 sept. 2024 |
| CVE-2024-43244 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
|
7.1
Élevée
|
18 août 2024 |
| CVE-2024-5793 |
The Houzez Theme - Functionality plugin for WordPress is vulnerable to SQL Injection via the ‘currency_code’ parameter…
|
8.8
Élevée
|
9 juil. 2024 |
| CVE-2023-26540 |
Improper Privilege Management vulnerability in Favethemes Houzez allows Privilege Escalation.This issue affects…
|
9.8
Critique
|
17 mai 2024 |
| CVE-2023-26009 |
Improper Privilege Management vulnerability in Favethemes Houzez Login Register allows Privilege Escalation.This issue…
|
9.8
Critique
|
17 mai 2024 |