Volerion logoVolerion
Volerion logoVolerion

Houzez WordPress Theme Broken Access Control Vulnerability

Vulnerability

A broken access control vulnerability has been identified in the Houzez WordPress theme, specifically in versions through 3.4.0. This vulnerability allows an unprivileged user to perform actions that require higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could enable an unprivileged user to execute actions reserved for users with higher privileges.

Remediation

Users of the Houzez WordPress theme should update to version 3.4.2 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
5.0
exploitability
5.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.