Login Request a demo
HO
Product
Homey
by Fave Themes · last CVE May 2, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Homey to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-12281
9.8
0%
Mar 5
Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile
Affected: through 2.4.2
CVE-2025-0749
8.1
1%
Mar 7
Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check
Affected: through 2.4.3
CVE-2025-1326
4.3
0%
May 2
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion
Affected: through 2.4.4
CVE-2025-1327
4.3
0%
May 2
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion
Affected: through 2.4.4
CVE-2025-0748
4.3
0%
Mar 7
Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification
Affected: through 2.4.3
Showing 5