Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Bearsthemes Clear all filters
TI-2025-09787 CVE-2025-10690 · GHSA-66g5-p6w6-whj9

Missing authorization in Bearsthemes Goza - Nonprofit Charity WordPress Theme

Priority MEDIUM 50

The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplus_import_pack_install_plugin' function in all versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00781 Published 2025-09-19 No fix listed CWE-862
TI-2025-09306 CVE-2025-10134 · GHSA-gp34-q874-5pw2

Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion

Priority MEDIUM 40

The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all versions up to, a…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00561 Published 2025-09-09 No fix listed CWE-73
TI-2025-04848 CVE-2025-5396 · GHSA-mr9j-vgmq-cxhq

Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution

Priority MEDIUM 51

The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2025-07-17 No fix listed CWE-94
TI-2025-04846 CVE-2025-5394 · GHSA-jg98-c5j8-6598

Missing authorization in Bearsthemes Alone – Charity Multipurpose Non-profit WordPress…

Priority HIGH 81

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.53247 Published 2025-07-15 No fix listed CWE-862
TI-2025-04845 CVE-2025-5393 · GHSA-844q-6pvj-pfmf

Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization…

Priority MEDIUM 46

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all ve…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00643 Published 2025-07-15 No fix listed CWE-73