Skip to content
OpenAdvisories

Vendor

Houzez.co

2 known vulnerabilities.

Products

Houzez CRM 1 Houzez 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-96339

    WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Houzez.co Houzez houzez allows Reflected XSS.This issue affects Houzez: from n/a through 4.4.0.

    Houzez.co Houzez
  • High 8.8
    CVE-2024-5792

    Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection

    The Houzez CRM plugin for WordPress is vulnerable to time-based SQL Injection via the notes ‘belong_to’ parameter in all versions up to, and including, 1.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…

    Houzez.co Houzez CRM Web / CMS