favethemes Vulnerabilities and Affected Products
Vulnerabilities associated with Homey Core.
Products
Clear product- Houzez18 vulnerabilities
- Houzez Theme - Functionality5 vulnerabilities
- Homey4 vulnerabilities
- Houzez Login Register3 vulnerabilities
- Homey Core2 vulnerabilities
- Houzez - Real Estate WordPress Theme2 vulnerabilities
- Homey Login Register1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-67964HIGH | WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Homey Core homey-core allows Reflected XSS.This issue affects Homey Core: from n/a through <= 2.4.3. CWE-79Jan 22, 2026 | CVSS7.1v3.1 | EPSS0.256% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-67965MEDIUM | WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerabilityMissing Authorization vulnerability in favethemes Homey Core homey-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Homey Core: from n/a through <= 2.4.3. CWE-862Dec 16, 2025 | CVSS5.3v3.1 | EPSS0.325% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |