Vendor

    Favethemes

    33 known vulnerabilities in products by Favethemes, 0 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Favethemes
    CriticalCVE-2023-26009

    WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation

    		9.8
    CriticalCVE-2023-26540

    WordPress Houzez theme <= 2.7.1 - Privilege Escalation

    		9.8
    HighCVE-2026-61996

    WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2023-36529

    WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection

    		9.9
    HighCVE-2025-53198

    WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability

    		8.1
    CriticalCVE-2024-51800

    WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2023-29432

    WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection

    		8.2
    CriticalCVE-2024-51888

    WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability

    		9.8
    HighCVE-2026-57768

    WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability

    		8.2
    HighCVE-2025-49407

    WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability

    		8.8
    HighCVE-2025-62053

    WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2024-22303

    WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2024-21743

    WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2024-5793

    Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection

    		8.8
    CriticalCVE-2025-52834

    WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability

    		9.3
    HighCVE-2025-62054

    WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2025-49406

    WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability

    		8.5
    MediumCVE-2025-49952

    WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability

    		6.5
    HighCVE-2025-67964

    WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-62057

    WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-31037

    WordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-9191

    Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search

    		6.3
    MediumCVE-2026-24355

    WordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2025-67965

    WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-62058

    WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability

    		6.5

    All vulnerabilities in search

    Products

    Products by Favethemes
    Houzez160
    Homey50
    Houzez Theme - Functionality50
    Houzez Login Register30