CVE-2025-62054

Name of the Vulnerable Software and Affected Versions Houzez Theme - Functionality versions prior to 4.1.9

Description The Houzez Theme - Functionality plugin for WordPress contains a Local File Inclusion issue. This allows authenticated attackers with contributor-level access or higher to include and execute arbitrary files on the server. By exploiting this, an attacker can execute PHP code contained within those files, bypass access controls, or obtain sensitive data, particularly when images or other safe file types can be uploaded and subsequently included.

Recommendations Update Houzez Theme - Functionality to a version newer than 4.1.8.