46 matches found
WordPress Homey theme <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check vulnerability
Limited Authentication Bypass due to Missing Empty Value Check vulnerability discovered by István Márton in WordPress Theme Homey versions = 2.4.3...
CVE-2024-12281
The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by...
CVE-2024-12281 Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile
The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by...
CVE-2024-12281 Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile
The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by...
CVE-2024-12281
CVE-2024-12281 – Homey WordPress Theme Privilege Escalation : The Homey theme (WordPress) allows users registering new accounts to set their own role, enabling unauthenticated attackers to obtain elevated privileges (Administrator/Editor/Shop Manager). Affected versions are all up to and includin...