Login Request a demo
HO
Product
Homey
by favethemes · last CVE Jul 4, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 2High 1Medium 2Low 0
Severity
All severities5Critical2High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Homey to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51800
9.8
0%
Apr 4
WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability
Affected: through 2.4.1
CVE-2025-52834
9.3
0%
Jun 27
WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability
Affected: through 2.4.7
CVE-2025-31037
7.1
0%
Jul 4
WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 2.4.5
CVE-2025-1326
4.3
0%
May 2
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion
Affected: before 2.4.5
CVE-2025-1327
4.3
0%
May 2
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion
Affected: before 2.4.5
Showing 5