Favethemes vulnerabilities
31 published CVEs name Favethemes among the affected products.
- 31Published CVEs31 of them scored
- 7Last 12 monthspublished in the last year
- 6Critical15 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61996
WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
favethemes · MLS On The Fly
High8.5 - CVE-2026-57768
WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability
favethemes · Houzez Login Register
High8.2 - CVE-2026-24355
WordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
favethemes · Houzez Theme - Functionality
Medium6.5 - CVE-2025-67964
WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
favethemes · Homey Core
High7.1 - CVE-2025-67965
WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerability
favethemes · Homey Core
Medium5.3 - CVE-2025-9163
Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
favethemes · Houzez
Medium6.1 - CVE-2025-9191
Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search
favethemes · Houzez
Medium6.3 - CVE-2025-62057
WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability
favethemes · Houzez Theme - Functionality
High7.1 - CVE-2025-62053
WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability
favethemes · Houzez
High8.1 - CVE-2025-62058
WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability
favethemes · Houzez Theme - Functionality
Medium6.5