Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: favethemes Component: Houzez Clear all filters
TI-2023-13812 CVE-2023-29432 · GHSA-xjjg-5fvp-6fv2

WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme.This issue affects Houzez - Real Estate WordPress Theme: from n/a befo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00748 Published 2023-12-20 Fixed in 2.8.3 CWE-89
TI-2023-18367 CVE-2023-36529 · GHSA-cfvm-c4h3-hfch

WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00685 Published 2023-11-03 No fix listed CWE-89