Skip to content
OpenAdvisories
Critical · 9.9 CVE-2023-36529 EUVD-2023-40478GHSA-cfvm-c4h3-hfch

WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Fave Themes Product: Houzez - Real Estate WordPress Theme Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress Theme: from n/a through 1.3.4.

Affected products

VendorProductAffectedFixed
Favethemes Houzez - Real Estate WordPress Theme ≤ 1.3.4 —

References