p PatchFirst

CVE-2026-112848

CVE-2026-112848 · WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.

CVSS 9.8 · Critical

Published
Updated

Affected products and versions

  • hostme v2

    Versions
    • ≥ 0, ≤ 7.0: Affected (custom)

    No fix published

Original sources

Check your server →