Skip to content
OpenAdvisories

Vendor

AivahThemes

8 known vulnerabilities.

Products

Anona 3 Hostme v2 3 Car Zone 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-112849

    WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0.

    AivahThemes Hostme v2
  • High 8.6
    CVE-2025-69139

    WordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.

    AivahThemes Car Zone
  • High 8.8
    CVE-2026-27338

    WordPress Car Zone theme <= 3.7 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7.

    AivahThemes Car Zone
  • High 8.8
    CVE-2025-68903

    WordPress Anona theme <= 8.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through <= 8.0.

    AivahThemes Anona
  • High 7.5
    CVE-2025-68907

    WordPress Hostme v2 theme <= 7.0 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through <= 7.0.

    AivahThemes Hostme v2
  • High 8.6
    CVE-2025-68901

    WordPress Anona theme <= 8.0 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.

    AivahThemes Anona
  • High 7.5
    CVE-2025-68902

    WordPress Anona theme <= 8.0 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.

    AivahThemes Anona