Vulnerabilities in favethemes
29 resultsCVE-2025-49405MEDIUMWordPress Houzez Theme < 4.1.4 - Local File Inclusion VulnerabilityEPSS 0.2%CVE-2025-53997MEDIUMWordPress Houzez theme <= 4.0.4 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-24754MEDIUMWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-9191MEDIUMHouzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved SearchEPSS 0.2%CVE-2025-31037HIGHWordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-62057HIGHWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-9163MEDIUMHouzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadEPSS 0.2%CVE-2025-62058MEDIUMWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24355MEDIUMWordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%