Product by Favethemes

    Houzez

    16 known vulnerabilities in Houzez (Favethemes), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Houzez (Favethemes)
    CriticalCVE-2023-26540

    WordPress Houzez theme <= 2.7.1 - Privilege Escalation

    		9.8
    CriticalCVE-2023-36529

    WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection

    		9.9
    HighCVE-2025-53198

    WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability

    		8.1
    CriticalCVE-2023-29432

    WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection

    		8.2
    HighCVE-2025-49407

    WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability

    		8.8
    HighCVE-2025-62053

    WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2024-22303

    WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2025-49406

    WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability

    		8.5
    MediumCVE-2025-49952

    WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability

    		6.5
    MediumCVE-2025-9191

    Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search

    		6.3
    HighCVE-2024-43244

    WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-9163

    Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

    		6.1
    MediumCVE-2025-24747

    WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-49405

    WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability

    		4.3
    MediumCVE-2025-53997

    WordPress Houzez theme <= 4.0.4 - Broken Access Control Vulnerability

    		4.3
    MediumCVE-2025-24754

    WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability

    		4.3

    All products by Favethemes