Skip to content
OpenAdvisories

Vendor

bearsthemes

6 known vulnerabilities.

Products

Goza - Nonprofit Charity WordPress Theme 2 Alone – Charity Multipurpose Non-profit WordPress Theme 2 Worry Proof Backup 1 Bears Backup 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-10690

    Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

    The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplus_import_pack_install_plugin' function in all versions up to, and including, 3.2.2. This makes…

    bearsthemes Goza - Nonprofit Charity WordPress Theme Web / CMS
  • Critical 9.1
    CVE-2025-10134

    Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion

    The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all versions up to, and including, 3.2.2. This makes it poss…

    bearsthemes Goza - Nonprofit Charity WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-5396

    Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution

    The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0. This is due to the bbackup_ajax_handle() function not having a capability check, nor validating user supplied input passed directly to ca…

    bearsthemes Bears Backup Web / CMS
  • Critical 9.8
    CVE-2025-5394 Public exploit Scanner template EPSS 53%

    Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

    The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This make…

    bearsthemes Alone – Charity Multipurpose Non-profit WordPress Theme Web / CMS
  • Critical 9.1
    CVE-2025-5393

    Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Deletion

    The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all versions up to, and including, 7.8.5. Thi…

    bearsthemes Alone – Charity Multipurpose Non-profit WordPress Theme Web / CMS