Advisories · Technology

favethemes Houzez.

Every CVE that names favethemes Houzez among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9163 CVE record

CVSS 6.1 Medium

Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
- favethemes Houzez
- Cross-site scripting (XSS)
Not analysed yet 26 Nov 2025
CVE-2025-9191 CVE record

CVSS 6.3 Medium

Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search
- favethemes Houzez
- Insecure deserialization
Not analysed yet 26 Nov 2025
CVE-2025-62053 CVE record

CVSS 8.1 High

WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability
- favethemes Houzez
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-49952 CVE record

CVSS 6.5 Medium

WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability
- favethemes Houzez
- Broken access control
Not analysed yet 22 Oct 2025
CVE-2025-49407 CVE record

CVSS 8.8 High

WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability
- favethemes Houzez
- Cross-site scripting (XSS)
Not analysed yet 28 Aug 2025
CVE-2025-49405 CVE record

CVSS 4.3 Medium

WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability
- Favethemes Houzez
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-49406 CVE record

CVSS 8.5 High

WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability
- favethemes Houzez
- Broken access control
Not analysed yet 20 Aug 2025
CVE-2025-53198 CVE record

CVSS 8.1 High

WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability
- favethemes Houzez
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53997 CVE record

CVSS 4.3 Medium

WordPress Houzez theme <= 4.0.4 - Broken Access Control Vulnerability
- favethemes Houzez
- Broken access control
Not analysed yet 16 Jul 2025
CVE-2025-24747 CVE record

CVSS 5.3 Medium

WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability
- favethemes Houzez
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24754 CVE record

CVSS 4.3 Medium

WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability
- favethemes Houzez
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2024-22303 CVE record

CVSS 8.8 High

WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability
- favethemes Houzez
- Privilege escalation
Not analysed yet 17 Sept 2024
CVE-2024-43244 CVE record

CVSS 7.1 High

WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability
- favethemes Houzez
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2024
CVE-2023-26540 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Houzez theme <= 2.7.1 - Privilege Escalation
- Favethemes Houzez
- Privilege escalation
Not analysed yet 17 May 2024