favethemes kayıtları
favethemes üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-266 Incorrect Privilege Assignment2
- CWE-269 Improper Privilege Management2
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2023-26540İstismar yok | WordPress Houzez theme <= 2.7.1 - Privilege Escalationfavethemes · houzez · CWE-269 | Kritik9,8 | — | %2,7 | 17 May 2024 |
40Planlayın | CVE-2023-26009İstismar yok | WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalationfavethemes · houzez login register · CWE-269 | Kritik9,8 | — | %2,7 | 17 May 2024 |
39İzleyin | CVE-2023-29432İstismar yok | WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injectionfavethemes · houzez · CWE-89 | Kritik9,8 | — | %0,7 | 20 Ara 2023 |
39İzleyin | CVE-2023-36529İstismar yok | WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injectionfavethemes · houzez · CWE-89 | Kritik9,8 | — | %0,7 | 3 Kas 2023 |
35İzleyin | CVE-2024-5793İstismar yok | Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injectionfavethemes · houzez theme - functionality · CWE-89 | Yüksek8,8 | — | %0,5 | 8 Tem 2024 |
35İzleyin | CVE-2024-21743İstismar yok | WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerabilityfavethemes · houzez login register · CWE-266 | Yüksek8,8 | — | %0,4 | 17 Eyl 2024 |
35İzleyin | CVE-2024-22303İstismar yok | WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerabilityfavethemes · houzez · CWE-266 | Yüksek8,8 | — | %0,4 | 17 Eyl 2024 |
17İzleyin | CVE-2025-1326İstismar yok | Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletionfavethemes · homey · CWE-862 | Orta4,3 | — | %0,2 | 2 May 2025 |
17İzleyin | CVE-2025-1327İstismar yok | Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletionfavethemes · homey · CWE-639 | Orta4,3 | — | %0,2 | 2 May 2025 |
- CVE-2023-2654040Planlayın
WordPress Houzez theme <= 2.7.1 - Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %3favethemes · houzez17 May 2024
- CVE-2023-2600940Planlayın
WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %3favethemes · houzez login register17 May 2024
- CVE-2023-2943239İzleyin
WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1favethemes · houzez20 Ara 2023
- CVE-2023-3652939İzleyin
WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1favethemes · houzez3 Kas 2023
- CVE-2024-579335İzleyin
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0favethemes · houzez theme - functionality8 Tem 2024
- CVE-2024-2174335İzleyin
WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0favethemes · houzez login register17 Eyl 2024
- CVE-2024-2230335İzleyin
WordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0favethemes · houzez17 Eyl 2024
- CVE-2025-132617İzleyin
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion
OrtaCVSS 4,3İstismar yokEPSS %0favethemes · homey2 May 2025
- CVE-2025-132717İzleyin
Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion
OrtaCVSS 4,3İstismar yokEPSS %0favethemes · homey2 May 2025