Skip to content
OpenAdvisories

Vendor

bearsthemes

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-5394 Public exploit Scanner template EPSS 53%

    Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

    The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This make…