Vendor

    Fave Themes

    6 known vulnerabilities in products by Fave Themes, 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fave Themes
    CriticalCVE-2024-11951

    Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register

    9.8
    CriticalCVE-2024-12281

    Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile

    9.8
    HighCVE-2025-0749

    Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check

    8.1
    MediumCVE-2025-1326

    Fave Themes Homey: Missing Authorization

    also in 1 other product

    4.3
    MediumCVE-2025-1327

    Fave Themes Homey: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    4.3
    MediumCVE-2025-0748

    Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification

    4.3

    Products

    Products by Fave Themes
    Homey50