CVE-2026-57768 HIGH

CVE-2026-57768: WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability

Vendor Favethemes
Product Houzez Login Register
Weakness CWE-266
Published July 13, 2026
Last update July 13, 2026
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3.

Explanation of Vulnerability in Simple Terms

02Summary

Houzez Login Register versions 3.3.3 and earlier contain an improper access control vulnerability that allows unauthenticated attackers to modify user data over the network. The vulnerability requires no user interaction and can be exploited remotely. Site administrators should update to a version newer than 3.3.3 immediately.

What an attacker can do

03Attacker Capabilities

Modify user account data without authentication, such as email addresses or account settings.

Potential impact on your site

04Site Impact

User accounts can be altered by attackers without permission, potentially leading to account takeover or data corruption.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

July 13, 2026 CVE published