Aivahthemes vulnerabilities
9 vulnerabilities
Known vulnerabilities in Aivahthemes products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Anona3 vulnerabilities
- Hostme V23 vulnerabilities
- Car Zone2 vulnerabilities
- Business Hours Pro1 vulnerabilities
HighCVE-2026-112849aivahthemes · hostme v2WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0.CriticalCVE-2026-112848aivahthemes · hostme v2WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.CriticalCVE-2021-24240aivahthemes · business_hours_pro +2 moreBusiness Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCEThe Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.EPSS3.04%CriticalCVE-2025-68907aivahthemes · hostme v2 +1 moreWordPress Hostme v2 theme <= 7.0 - Arbitrary File Deletion vulnerabilityImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through <= 7.0.EPSS0.44%HighCVE-2025-68903aivahthemes · anona +1 moreWordPress Anona theme <= 8.0 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through <= 8.0.EPSS0.48%CriticalCVE-2025-68901aivahthemes · anona +1 moreWordPress Anona theme <= 8.0 - Arbitrary File Deletion vulnerabilityImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.EPSS0.51%HighCVE-2025-68902aivahthemes · anona +1 moreWordPress Anona theme <= 8.0 - Arbitrary File Download vulnerabilityImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.EPSS0.50%CriticalCVE-2025-69139aivahthemes · car zone +1 moreWordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerabilityUnauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.EPSS0.53%HighCVE-2026-27338aivahthemes · car zone +1 moreWordPress Car Zone theme <= 3.7 - Deserialization of untrusted data vulnerabilityDeserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7.EPSS0.59%