Fave Themes vulnerabilities
6 published CVEs name Fave Themes among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-1326
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion
Fave Themes · Homey
Medium4.3 - CVE-2025-1327
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion
Fave Themes · Homey
Medium4.3 - CVE-2025-0748
Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification
Fave Themes · Homey
Medium4.3 - CVE-2025-0749
Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check
Fave Themes · Homey
High8.1 - CVE-2024-11951
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register
Fave Themes · Homey Login Register
Critical9.8 - CVE-2024-12281
Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile
Fave Themes · Homey
Critical9.8