Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Favethemes
Homey

favethemes Homey Vulnerabilities: CVEs, CISA KEV & Security Advisories

5 CVEs

favethemes Homey Vulnerabilities

CVE security advisories and vulnerability history for Homey by favethemes.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

With known exploit

7.0

Avg CVSS

2025–2025

Last updated July 4, 2025

Overview

favethemes Homey has 5 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting favethemes Homey, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of favethemes Homey's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of favethemes Homey's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No favethemes Homey CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every favethemes Homey version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

2.4.52 CVEs
> 2.4.11 CVE
> 2.4.51 CVE
> 2.4.71 CVE
2.4.21 CVE

Find a version

5 CVEs

Sort

WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31037
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (40th pct)2025-07-04
WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability
CVE-2025-52834
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.2% (46th pct)2025-06-27
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion
CVE-2025-1326
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.2% (38th pct)2025-05-02
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion
CVE-2025-1327
Patch
CWE-639
Medium · CVSS 4.3
EPSS 0.2% (38th pct)2025-05-02
WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability
CVE-2024-51800
Patch
CWE-266
Critical · CVSS 9.8
EPSS 0.6% (69th pct)2025-04-04

Common weakness types

The CWE weakness categories most often found in favethemes Homey CVEs. Follow any weakness for its full explanation.

CWE-266Incorrect Privilege Assignment1 CVE
CWE-639Authorization Bypass Through User-Controlled Key1 CVE
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVE
CWE-862Missing Authorization1 CVE
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVE

Other favethemes products

Browse vulnerabilities for other products by favethemes.

Houzez19 CVEs Houzez Theme - Functionality5 CVEs Homey Core2 CVEs Houzez Login Register2 CVEs Houzez - Real Estate WordPress Theme2 CVEs Homey Login Register1 CVEs Houzez CRM1 CVEs houzez-theme-functionality1 CVEs

All favethemes vulnerabilities

Frequently asked questions

Common questions about favethemes Homey vulnerabilities.

How many CVEs does favethemes Homey have?

favethemes Homey has 5 published CVE records since 2025.

How many favethemes Homey CVEs are in CISA KEV?

None of favethemes Homey's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for favethemes Homey vulnerabilities?

No favethemes Homey CVEs currently have a tracked public exploit in this dataset.

Which versions of favethemes Homey are affected?

5 distinct favethemes Homey versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in favethemes Homey CVEs?

favethemes Homey's CVEs most often map to these CWE weakness types: CWE-266 (Incorrect Privilege Assignment), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

How many critical favethemes Homey vulnerabilities are there?

favethemes Homey has 2 critical and 1 high-severity CVEs.

What is the average severity of favethemes Homey CVEs?

The average CVSS base score across favethemes Homey's scored CVEs is 7.0.

References

All favethemes vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track favethemes Homey vulnerabilities

Monitor new favethemes Homey vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References