Log in Start free

Favethemes

Products

ProductCVEsExploitedLatest
Houzez14–Nov 26, 2025
Houzez Theme - Functionality5–Jan 22, 2026
Homey3–Jul 4, 2025
Houzez Login Register3–Jul 13, 2026
Houzez - Real Estate WordPress Theme2–Dec 20, 2023
Homey Core2–Jan 22, 2026
MLS On The Fly1–Oct 29, 2026
Homey Login Register1–Jan 21, 2025

Exploited and recent CVEs

  • CVE-2026-61996 High 8.5 WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability 0.4%
  • CVE-2026-57768 High 8.2 WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-24355 Medium 6.5 WordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67964 High 7.1 WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-67965 Medium 5.3 WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-9163 Medium 6.1 Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.2%
  • CVE-2025-9191 Medium 6.3 Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search 0.3%
  • CVE-2025-62057 High 7.1 WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62053 High 8.1 WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-62058 Medium 6.5 WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62054 High 7.5 WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-49952 Medium 6.5 WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2025-49407 High 8.8 WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability 0.4%
  • CVE-2025-49405 Medium 4.3 WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability 0.3%
  • CVE-2025-49406 High 8.5 WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-53198 High 8.1 WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability 0.7%
  • CVE-2025-53997 Medium 4.3 WordPress Houzez theme <= 4.0.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-31037 High 7.1 WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-52834 Critical 9.3 WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability 0.3%
  • CVE-2024-51800 Critical 9.8 WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability 0.5%
  • CVE-2025-24747 Medium 5.3 WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-24754 Medium 4.3 WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability 0.2%
  • CVE-2024-51888 Critical 9.8 WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability 0.4%
  • CVE-2024-22303 High 8.8 WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability 0.4%
  • CVE-2024-21743 High 8.8 WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability 0.4%
  • CVE-2024-43244 High 7.1 WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5793 High 8.8 Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection 0.5%
  • CVE-2023-26540 Critical 9.8 WordPress Houzez theme <= 2.7.1 - Privilege Escalation 2.7%
  • CVE-2023-26009 Critical 9.8 WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation 2.7%
  • CVE-2023-29432 High 8.2 WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection 0.7%