Privilege Escalation Vulnerability in Houzez Login Register by Favethemes
CVE-2026-57768

8.2HIGH

Key Information:

Vendor

WordPress
Status
Houzez Login Register
Vendor
CVE Published:
13 July 2026

What is CVE-2026-57768?

The Houzez Login Register plugin by Favethemes contains a privilege escalation vulnerability that allows unauthorized users to gain elevated privileges. This issue arises due to incorrect privilege assignment in versions up to 3.3.3 of the Houzez Login Register plugin. Site administrators are advised to update to a secure version to mitigate potential risks.

Affected Version(s)

Houzez Login Register 0 <= 3.3.3

References

https://patchstack.com/database/Wordpress/Plugin/houzez-l...
vdb-entry

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack)
.