CVE-2025-0749

The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.

• CWE-288

• https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog
• https://www.wordfence.com/threat-intel/vulnerabilities/id/05f87510-28c3-4ad1-b2be-2408a199cf68?source=cve

Published

Mar 7, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0743An Improper Access Control vulnerability has been found in E…4.3
• CVE-2025-0744an Improper Access Control vulnerability has been found in E…6.5
• CVE-2025-0745An Improper Access Control vulnerability has been found in E…6.5
• CVE-2025-0746A Reflected Cross-Site Scripting vulnerability has been foun…5.4
• CVE-2025-0747A Stored Cross-Site Scripting vulnerability has been found i…5.4
• CVE-2025-0748The Homey theme for WordPress is vulnerable to Cross-Site Re…4.3
• CVE-2025-0750A vulnerability was found in CRI-O. A path traversal issue i…6.6
• CVE-2025-0751A vulnerability classified as critical has been found in Axi…6.5
• CVE-2025-0752A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. …7.1
• CVE-2025-0753A vulnerability classified as critical was found in Axiomati…6.5
• CVE-2025-0754The vulnerability was found in OpenShift Service Mesh 2.6.3 …4.3
• CVE-2025-0755The various bson_append functions in the MongoDB C driver li…7.5