AivahThemes vulnerabilities
Published CVEs affecting AivahThemes products: 6 record(s), with severity, exploitation and fixes.
CVE-2025-69139
High · 8.6
CWE-22 Jun 17, 2026
WordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.
CVE-2026-27338
High · 8.8
CWE-502 Mar 5, 2026
WordPress Car Zone theme <= 3.7 - Deserialization of untrusted data vulnerability
Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7.
CVE-2025-68907
High · 7.5
CWE-22 Jan 22, 2026
WordPress Hostme v2 theme <= 7.0 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue affects Hostme v2: from n/a through <= 7.0.
CVE-2025-68903
High · 8.8
CWE-502 Jan 22, 2026
WordPress Anona theme <= 8.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through <= 8.0.
CVE-2025-68902
High · 7.5
CWE-22 Jan 22, 2026
WordPress Anona theme <= 8.0 - Arbitrary File Download vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.
CVE-2025-68901
High · 8.6
CWE-22 Jan 22, 2026
WordPress Anona theme <= 8.0 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.