Vulnerabilities in Favethemes
30 resultsVexday analysis
Favethemes apresenta 7 vulnerabilidades registradas na base, sendo 4 delas críticas, com injeção SQL (CWE-89) como fraqueza predominante. Nenhuma das vulnerabilidades está sob exploração ativa conhecida (KEV), e não há lançamentos de risco recente nos últimos 90 dias, sugerindo um cenário de risco estável, embora a presença de vulnerabilidades críticas demande atenção aos patches disponíveis.
CVE-2025-67964HIGHWordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-9191MEDIUMHouzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved SearchEPSS 0.3%CVE-2025-53997MEDIUMWordPress Houzez theme <= 4.0.4 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-24754MEDIUMWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62057HIGHWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31037HIGHWordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57768HIGHWordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-9163MEDIUMHouzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadEPSS 0.2%CVE-2025-62058MEDIUMWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24355MEDIUMWordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%