Skip to content
Bearsthemes vulnerabilities
Newest
-
bearsthemes worry proof backup
Worry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload
CVE-2026-1311
8.8 High
-
bearsthemes alone
WordPress Alone theme <= 7.8.3 - Remote Code Execution (RCE) vulnerability
CVE-2025-60206
10.0 Critical
-
bearsthemes goza - nonprofit charity wordpress theme
Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
CVE-2025-10690
9.8 Critical
-
bearsthemes goza - nonprofit charity wordpress theme
Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion
CVE-2025-10134
9.1 Critical
-
bearsthemes alone
WordPress Alone < 7.8.5 - Arbitrary Code Execution Vulnerability
CVE-2025-54019
6.5 Medium
-
bearsthemes bears backup
Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution
CVE-2025-5396
9.8 Critical
-
bearsthemes alone – charity multipurpose non-profit wordpress theme
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
CVE-2025-5394
Public exploit
EPSS 53.2%
9.8 Critical
-
bearsthemes alone – charity multipurpose non-profit wordpress theme
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Deletion
CVE-2025-5393
9.1 Critical
-
bearsthemes alone
WordPress Alone theme <= 7.8.2 - Arbitrary Code Execution Vulnerability
CVE-2025-52718
7.2 High
-
bearsthemes sermons online, beplus sermon'e – sermons online +1 more
WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-35776
6.5 Medium