AivahThemes has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.4 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.4
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

hostmev2 2

Follow AivahThemes:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

AivahThemes vulnerabilities

CVEs affecting AivahThemes, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-112849High· 7.1

today

WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0.

▾ TwilightAivahThemes · hostmev2via CVEORG

CVE-2026-112848Critical· 9.8

today

WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.

▾ MidnightAivahThemes · hostmev2via CVEORG