PT-2025-14888 · Favethemes · Favethemes Homey

Ayoub Nouri · Published 2025-04-04 · Updated 2025-04-05 · CVE-2024-51800

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Favethemes Homey versions 2.4.1 and earlier

Description The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation. This vulnerability poses substantial risks within digital spaces, emphasizing the importance of prioritizing cybersecurity solutions.

Recommendations For versions 2.4.1 and earlier, update to a version that includes a fix for this issue, as no specific workaround or mitigation measures are provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-51800

Affected Products

Favethemes Homey

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-51800 · Security Note
• https://twitter.com/cybercronai/status/1908173784680444101 · Twitter Post
• https://patchstack.com/database/wordpress/theme/homey/vulnerability/wordpress-homey-theme-2-4-1-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1908438480021041421 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/homey/vulnerability/wordpress-homey-theme-2-4-1-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/cvetracker/20825 · Telegram Post
• https://t.me/cvedetector/22142 · Telegram Post
• https://twitter.com/Carlos_LopezMkt/status/1908175322060574990 · Twitter Post