FA
Vendor
favethemes
38
CVEs
0
On KEV
1
New 30D
Products
MO8.5
MLS On The Fly
favethemes
1 CVEs0 on KEV1 new
HO9.8
Houzez
favethemes
19 CVEs0 on KEV0 new
HO9.8
Homey
favethemes
5 CVEs0 on KEV0 new
HT8.8
Houzez Theme - Functionality
favethemes
5 CVEs0 on KEV0 new
HL9.8
Houzez Login Register
favethemes
3 CVEs0 on KEV0 new
HC7.1
Homey Core
favethemes
2 CVEs0 on KEV0 new
HR9.8
Houzez - Real Estate WordPress Theme
Favethemes
2 CVEs0 on KEV0 new
HL9.8
Homey Login Register
favethemes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61996 New | MO MLS On The Fly favethemes | 8.5 | Oct 29 | WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability |
| CVE-2026-57768 | HL Houzez Login Register favethemes | 8.2 | Jul 13 | WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability |
| CVE-2026-24355 | HT Houzez Theme - Functionality favethemes | 6.5 | Jan 22 | WordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67964 | HC Homey Core favethemes | 7.1 | Jan 22 | WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67965 | HC Homey Core favethemes | 5.3 | Dec 16 | WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerability |
| CVE-2025-9163 | HO Houzez favethemes | 6.1 | Nov 26 | Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload |
| CVE-2025-9191 | HO Houzez favethemes | 6.3 | Nov 26 | Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search |
| CVE-2025-62057 | HT Houzez Theme - Functionality favethemes | 7.1 | Nov 6 | WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-62053 | HO Houzez favethemes | 8.1 | Nov 6 | WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability |
| CVE-2025-62058 | HT Houzez Theme - Functionality favethemes | 6.5 | Oct 22 | WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-62054 | HT Houzez Theme - Functionality favethemes | 7.5 | Oct 22 | WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability |
| CVE-2025-49952 | HO Houzez favethemes | 6.5 | Oct 22 | WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2025-49407 | HO Houzez favethemes | 8.8 | Aug 28 | WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-49405 | HO Houzez Favethemes | 4.3 | Aug 28 | WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability |
| CVE-2025-49406 | HO Houzez favethemes | 8.5 | Aug 20 | WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability |
| CVE-2025-53198 | HO Houzez favethemes | 8.1 | Aug 20 | WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability |
| CVE-2025-53997 | HO Houzez favethemes | 4.3 | Jul 16 | WordPress Houzez theme <= 4.0.4 - Broken Access Control Vulnerability |
| CVE-2025-31037 | HO Homey favethemes | 7.1 | Jul 4 | WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-52834 | HO Homey favethemes | 9.3 | Jun 27 | WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability |
| CVE-2025-1326 | HO Homey Favethemes | 4.3 | May 2 | Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion |
| CVE-2025-1327 | HO Homey Favethemes | 4.3 | May 2 | Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion |
| CVE-2024-51800 | HO Homey Favethemes | 9.8 | Apr 4 | WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability |
| CVE-2025-24747 | HO Houzez favethemes | 5.3 | Jan 27 | WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability |
| CVE-2025-24754 | HO Houzez favethemes | 4.3 | Jan 27 | WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability |
| CVE-2024-51888 | HL Homey Login Register favethemes | 9.8 | Jan 21 | WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability |
| CVE-2024-22303 | HO Houzez favethemes | 8.8 | Sep 17 | WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability |
| CVE-2024-21743 | HL Houzez Login Register favethemes | 8.8 | Sep 17 | WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability |
| CVE-2024-43244 | HO Houzez favethemes | 7.1 | Aug 18 | WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5793 | HT Houzez Theme - Functionality Favethemes | 8.8 | Jul 9 | Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection |
| CVE-2023-26540 | HO Houzez Favethemes | 9.8 | May 17 | WordPress Houzez theme <= 2.7.1 - Privilege Escalation |
| CVE-2023-26009 | HL Houzez Login Register Favethemes | 9.8 | May 17 | WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation |
| CVE-2023-29432 | HR Houzez - Real Estate WordPress Theme Favethemes | 9.8 | Dec 20 | WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection |
| CVE-2023-36529 | HR Houzez - Real Estate WordPress Theme Favethemes | 9.8 | Nov 3 | WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection |