Plugin icon

Houzez Property Feed

houzez-property-feed

Vulnerabilities:

4

Last Updated:

July 23, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-08-06
Title
Houzez Property Feed < 2.5.49 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.5.49
CVSS
7.2 (high)
Published
2026-07-01
Title
Houzez Property Feed < 2.5.47 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Fixed in
Fixed in 2.5.47
CVSS
4.9 (medium)
Published
2025-03-29
Title
Houzez Property Feed < 2.5.5 - Unauthenticated Arbitrary File Download
Fixed in
Fixed in 2.5.5
CVSS
7.5 (high)
Published
2025-02-11
Title
Houzez Property Feed < 2.4.22 - Cross-Site Request Forgery to Property Feed Export Deletion
Fixed in
Fixed in 2.4.22
CVSS
4.3 (medium)