Homey WordPress Theme Authentication Bypass Vulnerability
Vulnerability
An authentication bypass vulnerability has been identified in the Homey theme for WordPress, affecting versions through 2.4.3. The issue arises because the 'verification_id' value can be set to empty, and the dashboard user profile page lacks a proper check for this. As a result, unauthenticated attackers can log in as the first verified user.
Impact
Exploitation of this vulnerability allows unauthenticated attackers to bypass authentication and log in as the first verified user on the site.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.