FT
Vendor
Fave Themes
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-1326 | HO Homey Fave Themes | 4.3 | May 2 | Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion |
| CVE-2025-1327 | HO Homey Fave Themes | 4.3 | May 2 | Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion |
| CVE-2025-0748 | HO Homey Fave Themes | 4.3 | Mar 7 | Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification |
| CVE-2025-0749 | HO Homey Fave Themes | 8.1 | Mar 7 | Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check |
| CVE-2024-11951 | HL Homey Login Register Fave Themes | 9.8 | Mar 5 | Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register |
| CVE-2024-12281 | HO Homey Fave Themes | 9.8 | Mar 5 | Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile |