PT-2025-5558 · Houzez · Houzez

Ananda Dhakal · Published 2025-01-27 · Updated 2025-01-27 · CVE-2025-24747

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Houzez versions prior to 3.4.0

Description The issue is related to a lack of authorization in Houzez. This problem affects Houzez, with details about the estimated number of potentially affected devices worldwide not provided. Information about real-world incidents where this issue was exploited is also not available. Technical details about exploitation, such as specific API endpoints, vulnerable parameters or variables, and function names, are not mentioned.

Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-24747

Affected Products

Houzez

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-24747 · Security Note
• https://twitter.com/CVEnew/status/1883888538044846312 · Twitter Post
• https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-theme-3-4-0-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Theme/houzez/vulnerability/wordpress-houzez-theme-3-4-0-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/16472 · Telegram Post