Vulnerabilities in favethemes
30 resultsVexday analysis
A Favethemes acumula 23 CVEs com apenas 2 críticas e nenhuma sob ataque ativo, indicando risco controlado. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, sugerindo atividade de descoberta moderada e sem sinais de exploração em massa no momento.
CVE-2025-67964HIGHWordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-9191MEDIUMHouzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved SearchEPSS 0.3%CVE-2025-53997MEDIUMWordPress Houzez theme <= 4.0.4 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-24754MEDIUMWordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62057HIGHWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31037HIGHWordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57768HIGHWordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-9163MEDIUMHouzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadEPSS 0.2%CVE-2025-62058MEDIUMWordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24355MEDIUMWordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%