CVE-2025-0749

Name of the Vulnerable Software and Affected Versions Homey theme for WordPress versions up to and including 2.4.3

Description The issue allows for authentication bypass due to the verification id value being set to empty and a missing not empty check in the dashboard user profile page. This enables unauthenticated attackers to log in to the first verified user.

Recommendations For versions up to and including 2.4.3, update to a version that includes the necessary checks to prevent authentication bypass, specifically ensuring that the verification id value is properly validated.