Known vulnerabilities in Favethemes Homey Core
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-67964 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Homey… | 7.1 High | Jan 22, 2026 |
| CVE-2025-67965 | Missing Authorization vulnerability in favethemes Homey Core homey-core allows Exploiting Incorrectly Configured… | 5.3 Medium | Dec 16, 2025 |