What’s Vulnerable › Products
favethemes Houzez vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your favethemes Houzez version is affected
Latest favethemes Houzez vulnerabilities
- CVE-2025-9191 — Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search (CVSS 6.3)
- CVE-2025-9163 — Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload (CVSS 6.1)
- CVE-2025-62053 — WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- CVE-2025-49952 — WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
- CVE-2025-49407 — WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 8.8)
- CVE-2025-49405 — WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability (CVSS 4.3)
- CVE-2025-53198 — WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability (CVSS 8.1)
- CVE-2025-49406 — WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability (CVSS 8.5)
- CVE-2025-53997 — WordPress Houzez theme <= 4.0.4 - Broken Access Control Vulnerability (CVSS 4.3)
- CVE-2025-24747 — WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2025-24754 — WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-22303 — WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability (CVSS 8.8)
- CVE-2024-21743 — WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability (CVSS 8.8)
- CVE-2024-43244 — WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2024-5793 — Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection (CVSS 8.8)
- CVE-2023-26540 — WordPress Houzez theme <= 2.7.1 - Privilege Escalation (CVSS 9.8)
- CVE-2023-26009 — WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation (CVSS 9.8)
- CVE-2023-29432 — WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection (CVSS 9.8)
- CVE-2023-36529 — WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection (CVSS 9.8)