CVE-2026-112849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...

CVE-2026-112848

Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0...

EUVD-2026-108956

Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0...

CVE-2026-112848 WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0...

CVE-2026-112848

The AivahThemes Hostme v2 WordPress theme (versions

CVE-2026-112848 WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0...

CVE-2026-112849 WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...

CVE-2026-112849 WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...

EUVD-2026-108955

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...

CVE-2026-112849

The AivahThemes Hostme v2 WordPress theme (versions

AivahThemes Hostme v2 deserialization injection vulnerability

AivahThemes Hostme v2 versions 7.0 and earlier contain a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data, potentially leading to object injection...

AivahThemes Hostme v2 cross-site scripting vulnerability

AivahThemes Hostme v2 versions 7.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation, potentially leading to DOM-based cross-site scripting attacks...

WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Hostme v2 versions = 7.0...

WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Hostme v2 versions = 7.0...

PT-2026-122069

Name of the Vulnerable Software and Affected Versions AivahThemes Hostme versions prior to 7.0 Description Insufficient input sanitization and output escaping allow for DOM-Based and Stored Cross-Site Scripting XSS. This occurs when an unauthenticated attacker injects arbitrary web scripts into...

PT-2026-122068

Name of the Vulnerable Software and Affected Versions Hostme v2 versions prior to 7.1 Description This issue involves the deserialization of untrusted input, which allows unauthenticated attackers to perform PHP Object Injection. While no POP chain a sequence of gadgets used to achieve code...

CVE-2025-68907 WordPress Hostme v2 theme <= 7.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through = 7.0...

CVE-2025-68907: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through = 7.0...