VULNERABILITY INTELLIGENCE

CVE-2025-49952

CVSS score8.1 HIGH

EPSS probability0.43%

CISA KEVNot currently listed

Published2025-10-22

Last modified2026-10-08

Description

Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Houzez: from n/a through <= 4.2.5.