Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Beplusthemes Clear all filters
TI-2025-37572 CVE-2025-60206 · GHSA-g2vm-hcjg-cch9

WordPress Alone theme <= 7.8.3 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in Beplusthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through <= 7.8.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00492 Published 2025-10-22 No fix listed CWE-94
TI-2025-33864 CVE-2025-54019 · GHSA-52qq-78xg-p62c

WordPress Alone < 7.8.5 - Arbitrary Code Execution Vulnerability

Priority LOW 28

Improper Control of Generation of Code ('Code Injection') vulnerability in Beplusthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through < 7.8.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.002 Published 2025-08-20 No fix listed CWE-94
TI-2025-32768 CVE-2025-52718 · GHSA-27fg-888w-q9q3

WordPress Alone theme <= 7.8.2 - Arbitrary Code Execution Vulnerability

Priority LOW 37

Improper Control of Generation of Code ('Code Injection') vulnerability in Beplusthemes Alone alone allows Remote Code Inclusion.This issue affects Alone: from n/a through <= 7.8.2.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0023 Published 2025-07-04 No fix listed CWE-94