35 matches found
CVE-2026-112848
Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0...
CVE-2026-112849
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...
CVE-2026-112849 WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...
EUVD-2026-108955
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...
CVE-2026-112849 WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0...
CVE-2026-112849
The AivahThemes Hostme v2 WordPress theme (versions
AivahThemes Hostme v2 deserialization injection vulnerability
AivahThemes Hostme v2 versions 7.0 and earlier contain a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data, potentially leading to object injection...
AivahThemes Hostme v2 cross-site scripting vulnerability
AivahThemes Hostme v2 versions 7.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation, potentially leading to DOM-based cross-site scripting attacks...
PT-2026-122069
Name of the Vulnerable Software and Affected Versions AivahThemes Hostme versions prior to 7.0 Description Insufficient input sanitization and output escaping allow for DOM-Based and Stored Cross-Site Scripting XSS. This occurs when an unauthenticated attacker injects arbitrary web scripts into...
PT-2026-122068
Name of the Vulnerable Software and Affected Versions Hostme v2 versions prior to 7.1 Description This issue involves the deserialization of untrusted input, which allows unauthenticated attackers to perform PHP Object Injection. While no POP chain a sequence of gadgets used to achieve code...
CVE-2026-27338
Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through = 3.7...
EUVD-2026-9611
Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through = 3.7...
CVE-2026-27338
Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through = 3.7...
CVE-2026-27338
Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through = 3.7...
CVE-2026-27338: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through = 3.7...
CVE-2025-68907
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through = 7.0...
CVE-2025-68903
Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through = 8.0...
CVE-2025-68901
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through = 8.0...
CVE-2025-68902
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through = 8.0...