Cross-Site Scripting Vulnerability in Houzez Theme by Favethemes

CVE-2025-49407

What is CVE-2025-49407?

The Houzez theme developed by Favethemes is subject to a reflected cross-site scripting vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, compromising their security by executing harmful actions within their browsers. The vulnerability affects versions from n/a through 4.1.1, putting both website administrators and users at risk. It is advisable for users to take immediate action by assessing their installations and applying necessary updates or fixes as recommended.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References