CVE-2024-11951

CVE-2024-11951 affects the WordPress plugin “Homey Login Register.” The issue: unauthenticated users who register new accounts can set their own role, enabling privilege escalation to administrator. Affected versions: up to and including 2.4.0. Exploitation details are not provided in the initial...

CVE-2024-11951 Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register

The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated...

CVE-2024-12281 Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile

The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by...

CVE-2024-12281 Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile

The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by...

CVE-2024-12281

CVE-2024-12281 – Homey WordPress Theme Privilege Escalation : The Homey theme (WordPress) allows users registering new accounts to set their own role, enabling unauthenticated attackers to obtain elevated privileges (Administrator/Editor/Shop Manager). Affected versions are all up to and includin...

WordPress plugin Homey 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

VulnCheck KEV: CVE-2024-11951

The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated...

WordPress Homey plugin <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile vulnerability

Unauthenticated Privilege Escalation in homeysaveprofile vulnerability discovered by Tonn in WordPress Theme Homey versions = 2.4.2...

CVE-2024-51888

Incorrect Privilege Assignment vulnerability in favethemes Homey Login Register homey-login-register allows Privilege Escalation.This issue affects Homey Login Register: from n/a through = 2.4.0...

CVE-2024-51888

Incorrect Privilege Assignment vulnerability in favethemes Homey Login Register homey-login-register allows Privilege Escalation.This issue affects Homey Login Register: from n/a through = 2.4.0...

CVE-2024-51888

CVE-2024-51888 describes an Incorrect Privilege Assignment vulnerability in the WordPress plugin “Homey Login Register,” enabling Privilege Escalation. Public details indicate it affects the plugin up to version 2.4.0 and that the CVE is currently unpatched in the provided sources. The record lis...

CVE-2024-51888 WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in favethemes Homey Login Register homey-login-register allows Privilege Escalation.This issue affects Homey Login Register: from n/a through = 2.4.0...

CVE-2024-51888 WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0...

WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by luc Patchstack in WordPress Plugin Homey Login Register versions = 2.4.0...

WordPress Homey theme <= 2.4.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ayoub Nouri Patchstack Alliance in WordPress Theme Homey versions = 2.4.1...

homey-outdoor.com Cross Site Scripting vulnerability OBB-3614929

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-28952

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...

CVE-2020-28952

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...

Design/Logic Flaw

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...

CVE-2020-28952

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...