{"id":"CVE-2025-0749","state":"PUBLISHED","title":"Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check","description":"The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.","publishedAt":"2025-03-07T01:44:53.516Z","updatedAt":"2026-04-08T16:33:33.767Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"Wordfence"},"assigner":"Wordfence","products":["Fave Themes Homey"],"affected":[{"vendor":"Fave Themes","product":"Homey","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.4.3","versionType":"semver"}]}],"references":["https://www.wordfence.com/threat-intel/vulnerabilities/id/05f87510-28c3-4ad1-b2be-2408a199cf68?source=cve","https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog"],"weaknesses":["CWE-288"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/0xxx/CVE-2025-0749.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-0749","state":"PUBLISHED","datePublished":"2025-03-07T01:44:53.516Z","dateUpdated":"2026-04-08T16:33:33.767Z","assignerShortName":"Wordfence","assignerOrgId":"b15e7b5b-3da4-40ae-a43c-f7aa60e62599","dateReserved":"2025-01-27T13:37:29.548Z"},"containers":{"cna":{"title":"Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check","descriptions":[{"lang":"en","value":"The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user."}],"affected":[{"vendor":"Fave Themes","product":"Homey","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.4.3","versionType":"semver"}]}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05f87510-28c3-4ad1-b2be-2408a199cf68?source=cve"},{"url":"https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-288","lang":"en","description":"CWE-288 Authentication Bypass Using an Alternate Path or Channel","type":"CWE"}]}],"providerMetadata":{"shortName":"Wordfence","orgId":"b15e7b5b-3da4-40ae-a43c-f7aa60e62599","dateUpdated":"2026-04-08T16:33:33.767Z"},"credits":[{"lang":"en","type":"finder","value":"István Márton"}],"timeline":[{"time":"2025-01-27T00:00:00.000Z","lang":"en","value":"Discovered"},{"time":"2025-01-27T00:00:00.000Z","lang":"en","value":"Vendor Notified"},{"time":"2025-03-06T00:00:00.000Z","lang":"en","value":"Disclosed"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-07T16:31:42.572591Z","id":"CVE-2025-0749","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-07T16:32:11.170Z"}}]}}}