Skip to contentFavethemes Homey vulnerabilities
- favethemes homey coreWordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-679647.1 High
- favethemes homey coreWordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerabilityCVE-2025-679655.3 Medium
- favethemes homeyWordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-310377.1 High
- favethemes homeyWordPress Homey theme <= 2.4.7 - SQL Injection vulnerabilityCVE-2025-528349.3 Critical
- fave themes homeyHomey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post DeletionCVE-2025-13264.3 Medium
- fave themes homeyHomey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User DeletionCVE-2025-13274.3 Medium
- favethemes homeyWordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerabilityCVE-2024-518009.8 Critical
- fave themes homeyHomey <= 2.4.3 - Cross-Site Request Forgery to User VerificationCVE-2025-07484.3 Medium
- fave themes homeyHomey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value CheckCVE-2025-07498.1 High
- fave themes homeyHomey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profileCVE-2024-122819.8 Critical
- fave themes homey login registerWordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerabilityCVE-2024-518889.8 Critical