PT-2024-19325 · Houzez · Houzez

Luc · Published 2024-09-17 · Updated 2024-09-26 · CVE-2024-22303

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Houzez versions 3.2.4 and earlier

Description The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in Houzez.

Recommendations For Houzez versions 3.2.4 and earlier, update to a version later than 3.2.4 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2025-06246

CVE-2024-22303

Affected Products

Houzez

References · 14

• https://bdu.fstec.ru/vul/2025-06246 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-22303 · Security Note
• https://twitter.com/the_yellow_fall/status/1838145547091480590 · Twitter Post
• https://twitter.com/iSecurity/status/1838209224020791672 · Twitter Post
• https://twitter.com/zoomeye_team/status/1838411624597852534 · Twitter Post
• https://t.me/latest_high_impact_cve/1162 · Telegram Post
• https://twitter.com/CveFindCom/status/1836043266820612460 · Twitter Post
• https://t.me/cvenotify/96072 · Telegram Post
• https://twitter.com/CVEnew/status/1836040299170222232 · Twitter Post
• https://twitter.com/zoomeye_team/status/1838414916199551151 · Twitter Post
• https://twitter.com/cracbot/status/1837733651469291722 · Twitter Post
• https://twitter.com/zoomeye_team/status/1838415041118576695 · Twitter Post
• https://t.me/cvedetector/5811 · Telegram Post
• https://patchstack.com/database/vulnerability/houzez/wordpress-houzez-theme-3-2-4-privilege-escalation-vulnerability?_s_id=cve · Note