Cross-Site Request Forgery Vulnerability in Houzez Property Feed Plugin by WordPress
CVE-2025-0808
5.4MEDIUM
What is CVE-2025-0808?
The Houzez Property Feed plugin for WordPress is vulnerable due to inadequate nonce validation during the 'deleteexport' action, affecting all versions up to and including 2.4.21. This security issue allows unauthenticated attackers to exploit this loophole, potentially deleting property feed exports by tricking site administrators into performing actions through misleading links. Site owners must update the plugin to the latest version to mitigate this risk.
Affected Version(s)
Houzez Property Feed * <= 2.4.21