hostmev2 vulnerabilities
CVEs whose affected-version data names the hostmev2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112849High· 7.1WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0.
▾ TwilightAivahThemes · hostmev2via CVEORG
CVE-2026-112848Critical· 9.8WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.
▾ MidnightAivahThemes · hostmev2via CVEORG