Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation

The Houzez theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the houzez_ajax_password_reset function not properly verifying a user's identity prior to reseting a password. This makes it possible for authenticated attackers, with subscriber-level access and above, to gain administrative access to vulnerable sites.