What’s Vulnerable › Products

Fave Themes Homey vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Fave Themes Homey version is affected

Latest Fave Themes Homey vulnerabilities

• CVE-2025-31037 — WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-52834 — WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-1327 — Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion (CVSS 4.3)
• CVE-2025-1326 — Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion (CVSS 4.3)
• CVE-2024-51800 — WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability (CVSS 9.8)
• CVE-2025-0749 — Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check (CVSS 8.1)
• CVE-2025-0748 — Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification (CVSS 4.3)
• CVE-2024-12281 — Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile (CVSS 9.8)