Aivahthemes Hostme V2 vulnerabilities
3 vulnerabilities
Known vulnerabilities in Aivahthemes Hostme V2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-112849aivahthemes · hostme v2WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0.CriticalCVE-2026-112848aivahthemes · hostme v2WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.CriticalCVE-2025-68907aivahthemes · hostme v2 +1 moreWordPress Hostme v2 theme <= 7.0 - Arbitrary File Deletion vulnerabilityImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through <= 7.0.EPSS0.44%