Home Services
Home Services has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Home Services has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by stealthcopter. Home Services is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.
CVE-2025-26930Home Services <= 1.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Home Services
Author
alleythemes
Home Services is a feature-rich WordPress theme devoted to home service businesses like Smart Home Installation and Integration, Home Cleaning and Sanitization Services, Home Renovation and Remodeling, Landscaping and Outdoor Services, Home Organization and Decluttering Services, Home Maintenance and Repair, Moving and Storage Services, Home Security Systems Installation and Monitoring, Interior Design and Decoration, Home Energy Efficiency Services, Appliance Repair and Installation, Water Damage Restoration, Plumber and Plumbing Businesses, Pest Control Services, Home Theater Installation, Eco-Friendly and Sustainable Home Services, Home-Based Fitness Services, Virtual Home Consultation Services, Home Automation and Smart Home Integration, Specialized Cleaning Services, Emergency Home Services, HVAC Services, Carpentry Services, Electrical Services, Personal Concierge Services, Animal Care Services, Mobile Repair and Maintenance Services, and such businesses.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C