Skip to content

Favethemes Houzez vulnerabilities

favethemes houzezWordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-963397.1 HighOctober 16, 2026
favethemes houzez login registerWordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerabilityCVE-2026-577688.2 HighJuly 13, 2026
favethemes houzez theme - functionalityWordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-243556.5 MediumJanuary 22, 2026
favethemes houzezHouzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2025-91636.1 MediumNovember 26, 2025
favethemes houzezHouzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved SearchCVE-2025-91916.3 MediumNovember 26, 2025
favethemes houzez theme - functionalityWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-620577.1 HighNovember 6, 2025
favethemes houzezWordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerabilityCVE-2025-620538.1 HighNovember 6, 2025
favethemes houzez theme - functionalityWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-620586.5 MediumOctober 22, 2025
favethemes houzez theme - functionalityWordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerabilityCVE-2025-620547.5 HighOctober 22, 2025
favethemes houzezWordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-499526.5 MediumOctober 22, 2025
favethemes houzezWordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-494078.8 HighAugust 28, 2025
favethemes houzezWordPress Houzez Theme < 4.1.4 - Local File Inclusion VulnerabilityCVE-2025-494054.3 MediumAugust 28, 2025
favethemes houzezWordPress Houzez Theme <= 4.1.1 - Broken Access Control VulnerabilityCVE-2025-494068.5 HighAugust 20, 2025
favethemes houzezWordPress Houzez theme <= 4.0.4 - Local File Inclusion VulnerabilityCVE-2025-531988.1 HighAugust 20, 2025
favethemes houzezWordPress Houzez theme <= 4.0.4 - Broken Access Control VulnerabilityCVE-2025-539974.3 MediumJuly 16, 2025
favethemes houzezWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityCVE-2025-247475.3 MediumJanuary 27, 2025
favethemes houzezWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityCVE-2025-247544.3 MediumJanuary 27, 2025
favethemes houzezWordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerabilityCVE-2024-223038.8 HighSeptember 17, 2024
favethemes houzez, houzez login register +1 moreWordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerabilityCVE-2024-217438.8 HighSeptember 17, 2024
favethemes houzezWordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432447.1 HighAugust 18, 2024
favethemes houzez crm, houzez crm +1 moreHouzez CRM <= 1.4.2 - Authenticated (Seller+) SQL InjectionCVE-2024-57928.8 HighJuly 10, 2024
favethemes houzez, houzez theme - functionality +1 moreHouzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL InjectionCVE-2024-57938.8 HighJuly 9, 2024
favethemes houzezWordPress Houzez theme <= 2.7.1 - Privilege EscalationCVE-2023-265409.8 CriticalMay 17, 2024
favethemes houzez, houzez login register +1 moreWordPress Houzez Login Register plugin <= 2.6.3 - Privilege EscalationCVE-2023-260099.8 CriticalMay 17, 2024
favethemes houzez, houzez - real estate wordpress theme +1 moreWordPress Houzez Theme < 2.8.3 is vulnerable to SQL InjectionCVE-2023-294328.2 HighDecember 20, 2023
favethemes houzez, houzez - real estate wordpress theme +1 moreWordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL InjectionCVE-2023-365299.9 CriticalNovember 3, 2023