Houzez

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-29432 Dec 20, 18:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme.8.3. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress SQLi Houzez Favethemes

NVD

CVSS 3.1

8.2

EPSS

0.1%

CVE-2023-36529 Nov 03, 17:15 CRITICAL Act Now

A vulnerability in Favethemes Houzez CRM houzez-crm.3.4. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Wordpress Plugin Houzez Favethemes

NVD

CVSS 3.1

9.9

EPSS

0.2%

CVE-2023-29432

EPSS 0% CVSS 8.2

HIGH This Week

WordPress SQLi Houzez +1

NVD

CVE-2023-36529

EPSS 0% CVSS 9.9

CRITICAL Act Now

A vulnerability in Favethemes Houzez CRM houzez-crm.3.4. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Wordpress Plugin +2

NVD