A vulnerability was found in Fave Themes Homey Plugin up to 2.4.3 on WordPress. It has been rated as problematic. Affected by this issue is the function homey_verify_user_manually. The manipulation leads to cross-site request forgery.

This vulnerability is handled as CVE-2025-0748. The attack may be launched remotely. There is no exploit available.