Houzez.co CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Houzez.co CVE published 2026-10-16

CVE-2026-96339

A Cross-site Scripting vulnerability in Houzez.co Houzez houzez allows Reflected XSS, affecting versions from n/a through 4.4.0. The vulnerability exists in the Houzez theme for WordPress, specifically in versions from n/a through 4.4.0. Defenders should assess exposure and potential impact on web applications using Houzez. Verification of exposure is necessary to determine potential impact. Defenders mus [truncated]