Vulnerabilities in favethemes

30 results
Vexday analysis

A Favethemes acumula 23 CVEs com apenas 2 críticas e nenhuma sob ataque ativo, indicando risco controlado. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, sugerindo atividade de descoberta moderada e sem sinais de exploração em massa no momento.

CVE-2025-49405MEDIUMWordPress Houzez Theme < 4.1.4 - Local File Inclusion VulnerabilityEPSS 0.3%CVE-2025-24747MEDIUMWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-9191MEDIUMHouzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved SearchEPSS 0.3%CVE-2025-31037HIGHWordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-53997MEDIUMWordPress Houzez theme <= 4.0.4 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-24754MEDIUMWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62057HIGHWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-9163MEDIUMHouzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadEPSS 0.2%CVE-2025-62058MEDIUMWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24355MEDIUMWordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%