Homey

Explore Homey vulnerabilities across all versions. Currently tracking 8 known vulnerabilities, including severity, impact, and patch status.

Avg CVSSMedium

6.6/ 10

Patch Coverage63%

Open

Fixed

Get automatic notifications for all Homey vulnerabilities before they are exploited.

Vulnerability Records

8 records


2025-06-26 00:00	Homey <= 2.4.5 - Reflected Cross-Site Scripting Homey <= 2.4.5	`CVE-2025-31037`	6.1 Medium	a00n	No
2025-06-24 00:00	Homey <= 2.4.5 - Unauthenticated SQL Injection Homey <= 2.4.5	`CVE-2025-52834`	7.5 High	Frank	No
2025-05-01 00:00	Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion Homey <= 2.4.4	`CVE-2025-1327`	4.3 Medium	a00n	Yes
2025-05-01 00:00	Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion Homey <= 2.4.4	`CVE-2025-1326`	4.3 Medium	a00n	Yes
2025-03-06 00:00	Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check Homey <= 2.4.3	`CVE-2025-0749`	8.1 High	István Márton	Yes
2025-03-06 00:00	Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification Homey <= 2.4.3	`CVE-2025-0748`	4.3 Medium	István Márton	Yes
2025-03-04 21:24	Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile Homey <= 2.4.2	`CVE-2024-12281`	9.8 Critical	Tonn	Yes
2025-01-13 00:00	Homey <= 2.4.1 - Authenticated (Subscriber+) Privilege Escalation Homey <= 2.4.1	`CVE-2024-51800`	8.8 High	a00n	No

Showing 1–8 of 8 reports