Favethemes Houzez

• CVE-2025-9163 Medium 6.1 Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.2%
• CVE-2025-9191 Medium 6.3 Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search 0.3%
• CVE-2025-62053 High 8.1 WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability 0.4%
• CVE-2025-49952 Medium 6.5 WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability 0.4%
• CVE-2025-49407 High 8.8 WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability 0.4%
• CVE-2025-49405 Medium 4.3 WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability 0.3%
• CVE-2025-49406 High 8.5 WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability 0.3%
• CVE-2025-53198 High 8.1 WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability 0.7%
• CVE-2025-53997 Medium 4.3 WordPress Houzez theme <= 4.0.4 - Broken Access Control Vulnerability 0.3%
• CVE-2025-24747 Medium 5.3 WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability 0.3%
• CVE-2025-24754 Medium 4.3 WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability 0.2%
• CVE-2024-22303 High 8.8 WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability 0.4%
• CVE-2024-43244 High 7.1 WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-26540 Critical 9.8 WordPress Houzez theme <= 2.7.1 - Privilege Escalation 2.7%