Alone – Charity Multipurpose Non-profit WordPress Theme vulnerabilities

2 known vulnerabilities in Alone – Charity Multipurpose Non-profit WordPress Theme from Bearsthemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Alone – Charity Multipurpose Non-profit…: Missing Authorization

  CVE-2025-5394Jul 15, 2025BearsthemesEPSS 53.2%

  The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This makes

• 9.1 Critical severity

  Alone – Charity Multipurpose Non-profit…: External Control of File Name or Path

  CVE-2025-5393Jul 15, 2025Bearsthemes

  The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all versions up to, and including, 7.8.5. This