AivahThemes

Products

ProductCVEsExploitedLatest
Anona3–Jan 22, 2026
Hostme v23–Oct 23, 2026
Car Zone2–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-112848 Critical 9.8 WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-112849 High 7.1 WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69139 High 8.6 WordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-27338 High 8.8 WordPress Car Zone theme <= 3.7 - Deserialization of untrusted data vulnerability 0.5%
  • CVE-2025-68907 High 7.5 WordPress Hostme v2 theme <= 7.0 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2025-68903 High 8.8 WordPress Anona theme <= 8.0 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-68902 High 7.5 WordPress Anona theme <= 8.0 - Arbitrary File Download vulnerability 0.5%
  • CVE-2025-68901 High 8.6 WordPress Anona theme <= 8.0 - Arbitrary File Deletion vulnerability 0.5%