Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Homey — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Homey, with AI-generated Chinese analysis, references, and POCs.

Vendor: Fave Themes

CVE IDTitleCVSSSeverityPublished
CVE-2025-31037 WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-07-04
CVE-2025-52834 WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability CWE-89 9.3 Critical2025-06-27
CVE-2025-1326 Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion CWE-862 4.3 Medium2025-05-02
CVE-2025-1327 Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion CWE-639 4.3 Medium2025-05-02
CVE-2024-51800 WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability CWE-266 9.8 Critical2025-04-04
CVE-2025-0748 Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification CWE-352 4.3 Medium2025-03-07
CVE-2025-0749 Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check CWE-288 8.1 High2025-03-07
CVE-2024-12281 Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile CWE-269 9.8 Critical2025-03-05

All 8 known CVE vulnerabilities affecting Homey with full Chinese analysis, references, and POCs where available.