CVE-2026-65560

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in Houzez Property Feed versions up to 2.5.48 allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking or data theft. Organizations using affected versions of this plugin should prioritize patching to mitigate the risk of exploitation, especially those handling sensitive user data or financial transactions.