Input validation vulnerability in Houzez Theme – Functionality 3.2.2

The Houzez Theme, a plugin used with WordPress, has a security issue where hackers can inject code into the system through a parameter called ‘currency_code’. This can happen in any version up to 3.2.2 and is caused by not properly protecting the user’s input and not properly preparing the existing code. This means that attackers with Custom-level access or higher can add their own code to steal sensitive information from the database.