Extension WordPress
Vulnérabilités Houzez Theme – Functionality
Cette page rassemble les failles publiées pour Houzez Theme – Functionality, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Houzez Theme – Functionality
7 fiches
Houzez Theme – Functionality <= 4.2.6 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Houzez Theme – Functionality plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-4.2.6
4.2.7
17/01/2026
Houzez Theme – Functionality < 4.2.0 – Unauthenticated Stored Cross-Site Scripting
The Houzez Theme – Functionality plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 4.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
[*, 4.2.0)
4.2.0
16/10/2025
Houzez Theme – Functionality <= 4.1.8 – Authenticated (Contributor+) Local File Inclusion
The Houzez Theme – Functionality plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.8. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary…
*-4.1.8
4.2.0
16/10/2025
Houzez Theme – Functionality < 4.2.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Houzez Theme – Functionality plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 4.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
[*, 4.2.0)
4.2.0
16/10/2025
Houzez Theme – Functionality <= 4.1.2 – Authenticated (Subscriber+) Arbitrary File Download
The Houzez Theme – Functionality plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of…
*-4.1.2
4.1.4
23/09/2025
Houzez Theme – Functionality <= 4.1.2 – Missing Authorization
The Houzez Theme – Functionality plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.1.2. This makes it possible for authenticated attackers, with…
*-4.1.2
4.1.4
23/09/2025
Houzez Theme – Functionality <= 3.2.2 – Authenticated (Seller+) SQL Injection
The Houzez Theme – Functionality plugin for WordPress is vulnerable to SQL Injection via the ‘currency_code’ parameter in all versions up to, and including, 3.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient…
*-3.2.2
3.2.3
08/07/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.