Vulnerabilities > Favethemes > Homey
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-05-02 | CVE-2025-1326 | Missing Authorization vulnerability in Favethemes Homey The Homey theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the homey_reservation_del() function in all versions up to, and including, 2.4.4. | 4.3 |
| 2025-05-02 | CVE-2025-1327 | Authorization Bypass Through User-Controlled Key vulnerability in Favethemes Homey The Homey theme for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.4 via the 'homey_delete_user_account' action due to missing validation on a user controlled key. | 4.3 |