Skip to content
FFave Themes
Exploited and recent CVEs
-
CVE-2025-1326
Medium 4.3
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion
0.2%
-
CVE-2025-1327
Medium 4.3
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion
0.2%
-
CVE-2025-0748
Medium 4.3
Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification
0.2%
-
CVE-2025-0749
High 8.1
Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check
0.5%
-
CVE-2024-11951
Critical 9.8
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register
0.4%
-
CVE-2024-12281
Critical 9.8
Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile
0.4%