Aivahthemes

9 CVEs in 4 Aivahthemes products, including Anona, Hostme V2, Car Zone. Newest: CVE-2026-112849 (2026-10-23). Severity, EPSS and public exploits for each.

Aivahthemes products with known CVEs

ProductCVEs
Anona3
Hostme V23
Car Zone2
Business Hours Pro1
Aivahthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-112849High7.12026-10-23Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This…
CVE-2026-112848Critical9.82026-10-23Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.
CVE-2025-69139High8.62026-06-17Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.
CVE-2026-27338High8.82026-03-05Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7.
CVE-2025-68907High7.52026-01-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue…
CVE-2025-68903High8.82026-01-22Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through <= 8.0.
CVE-2025-68902High7.52026-01-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affect…
CVE-2025-68901High8.62026-01-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affect…
CVE-2021-24240Critical9.82021-04-22The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an u…