Fave Themes vulnerabilities
We track 3 vulnerabilities in Fave Themes products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2025.
Latest Fave Themes vulnerabilities
- 8.1 High severity
Homey: Authentication Bypass Using an Alternate Path or Channel
The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it po
- 9.8 Critical severity
Homey: Improper Privilege Management
The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attacke
- 9.8 Critical severity
Homey Login Register: Improper Privilege Management
The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthe