Favethemes vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20246
3. 202519
4. 20264

Newest CVEs

• CVE-2026-61996

  WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability

  favethemes · MLS On The Fly

  High8.5
• CVE-2026-57768

  WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability

  favethemes · Houzez Login Register

  High8.2
• CVE-2026-24355

  WordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

  favethemes · Houzez Theme - Functionality

  Medium6.5
• CVE-2025-67964

  WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

  favethemes · Homey Core

  High7.1
• CVE-2025-67965

  WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerability

  favethemes · Homey Core

  Medium5.3
• CVE-2025-9163

  Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

  favethemes · Houzez

  Medium6.1
• CVE-2025-9191

  Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search

  favethemes · Houzez

  Medium6.3
• CVE-2025-62057

  WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability

  favethemes · Houzez Theme - Functionality

  High7.1
• CVE-2025-62053

  WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability

  favethemes · Houzez

  High8.1
• CVE-2025-62058

  WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability

  favethemes · Houzez Theme - Functionality

  Medium6.5