Descrição
The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the ‘verification_id’ value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.
Software
Não informado
Tipo Software
Tema
CVE
CVE-2025-0749
Tags
Nâo informado
Data de publicação
06/03/2025
Última atualização
08/03/2025
Pontuação em CVSS 3.0
8.1
Alto