Houzez WordPress Theme Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the Houzez WordPress theme, specifically in versions through 3.4.0. This vulnerability allows unprivileged users to perform actions that require higher privileges, due to missing authorization checks.

Impact

Exploitation of this vulnerability could enable an unprivileged user to execute actions reserved for higher privileged users, potentially leading to unauthorized changes or access within the WordPress site.

Remediation

Users of the Houzez WordPress theme should update to version 3.4.2 or later to address this vulnerability.