Goza - Nonprofit Charity WordPress Theme vulnerabilities

2 known vulnerabilities in Goza - Nonprofit Charity WordPress Theme from Bearsthemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Goza - Nonprofit Charity WordPress Theme: Missing Authorization

  CVE-2025-10690Sep 19, 2025Bearsthemes

  The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplus_import_pack_install_plugin' function in all versions up to, and including, 3.2.2. This makes

• 9.1 Critical severity

  Goza - Nonprofit Charity WordPress Theme: External Control of File Name or Path

  CVE-2025-10134Sep 9, 2025Bearsthemes

  The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all versions up to, and including, 3.2.2. This makes it possi