Houzez Theme - Functionality

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Houzez Theme - Functionality

Information

Software Type Plugin
Software Slug houzez-theme-functionality
Software Status Active
Software Author Favethemes
Software Website themeforest.net
Software Record Last Updated July 8, 2024

7 Vulnerabilities

Submit a Vulnerability
Houzez Theme - Functionality <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-24355
Jan 17, 2026
Researcher: João Pedro Soares de Alcântara
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62058
Oct 16, 2025
Researcher: João Pedro Soares de Alcântara
Houzez Theme - Functionality <= 4.1.8 - Authenticated (Contributor+) Local File Inclusion
7.5
CVE-2025-62054
Oct 16, 2025
Researcher: João Pedro Soares de Alcântara
Houzez Theme - Functionality < 4.2.0 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2025-62057
Oct 16, 2025
Researcher: João Pedro Soares de Alcântara
Houzez Theme - Functionality <= 4.1.2 - Missing Authorization
4.3
CVE ID Unknown
Sep 23, 2025
Researcher: Rafie Muhammad
Houzez Theme - Functionality <= 4.1.2 - Authenticated (Subscriber+) Arbitrary File Download
8.1
CVE ID Unknown
Sep 23, 2025
Researcher: Rafie Muhammad
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
8.8
CVE-2024-5793
Jul 8, 2024
Researcher: István Márton
Title Status CVE ID CVSS Researchers Date
Houzez Theme - Functionality <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2026-24355 6.4 João Pedro Soares de Alcântara January 17, 2026
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-62058 6.4 João Pedro Soares de Alcântara October 16, 2025
Houzez Theme - Functionality <= 4.1.8 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-62054 7.5 João Pedro Soares de Alcântara October 16, 2025
Houzez Theme - Functionality < 4.2.0 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2025-62057 7.2 João Pedro Soares de Alcântara October 16, 2025
Houzez Theme - Functionality <= 4.1.2 - Missing Authorization Patched 4.3 Rafie Muhammad September 23, 2025
Houzez Theme - Functionality <= 4.1.2 - Authenticated (Subscriber+) Arbitrary File Download Patched 8.1 Rafie Muhammad September 23, 2025
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection Patched CVE-2024-5793 8.8 István Márton July 8, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation