WordPress Theme ‘Houzez’ and Associated Plugin Vulnerabilities Expose Thousands of Sites

The flaws include a privilege escalation vulnerability (CVE-2024-22303) in the Houzez theme, allowing unauthenticated users to elevate their privileges and potentially take over a site through HTTP requests.