Vulnerabilities in Fave Themes
6 resultsCVE-2025-0749HIGHHomey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value CheckEPSS 0.5%CVE-2024-11951CRITICALHomey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_registerEPSS 0.4%CVE-2024-12281CRITICALHomey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profileEPSS 0.4%CVE-2025-1326MEDIUMHomey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post DeletionEPSS 0.2%CVE-2025-1327MEDIUMHomey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User DeletionEPSS 0.2%CVE-2025-0748MEDIUMHomey <= 2.4.3 - Cross-Site Request Forgery to User VerificationEPSS 0.2%