The vulnerability identified as CVE-2025-24754 affects the favethemes Houzez product through version 3.4.0. It is characterized as a missing authorization issue, meaning that certain actions or functionalities can be accessed or executed without proper permission checks. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with low privileges can exploit this missing authorization vulnerability to perform unauthorized actions that may alter data or application state, impacting data integrity. There is no impact on confidentiality or availability reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected versions and monitor for unusual activity related to authorization bypass. Avoid upgrading to affected versions if possible.