Homey vulnerabilities

2 known vulnerabilities in Homey from Fave Themes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Homey: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-0749Mar 7, 2025Fave Themes

  The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it po

• 9.8 Critical severity

  Homey: Improper Privilege Management

  CVE-2024-12281Mar 5, 2025Fave Themes

  The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attacke