CVE-2026-57768
Received Received - Intake

Privilege Escalation in Houzez Login Register

Publication date: 2026-07-13

Last updated on: 2026-07-13

Assigner: Patchstack

Description
Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-13
Last Modified
2026-07-13
Generated
2026-07-13
AI Q&A
2026-07-13
EPSS Evaluated
N/A
NVD
CVE-2026-57768
EUVD
EUVD-2026-43389

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
favethemes houzez_login_register From 3.0.0 (inc) to 3.3.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The WordPress Houzez Login Register Plugin, versions 3.3.3 and below, contains a high-priority Privilege Escalation vulnerability (CVE-2026-57768). This flaw allows unauthenticated attackers to escalate their low-privilege accounts to higher privileges, potentially gaining full control of the website.

It is classified under OWASP Top 10 A7 (Identification and Authentication Failures) and poses a significant security risk with a CVSS score of 8.2.

Impact Analysis

This vulnerability can allow attackers to escalate their privileges on a website using the Houzez Login Register Plugin, potentially gaining full control over the site.

Such control could lead to unauthorized changes, data breaches, or complete takeover of the website, severely impacting the security and integrity of your online presence.

Since the vulnerability can be exploited without authentication, it increases the risk of mass exploitation across many websites.

Detection Guidance

There is no specific information provided about detection commands or methods to identify this vulnerability on your network or system.

Mitigation Strategies

Immediate mitigation steps include updating the Houzez Login Register plugin to a version above 3.3.3 once available.

Since no official patch is currently available, applying the mitigation rule issued by Patchstack to block attacks is advised.

You should also consider seeking assistance from your hosting provider or a developer to implement temporary protections.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57768. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart