Bearsthemes
6 CVEs across 5 Bearsthemes products. Browse Bearsthemes vulnerabilities, severities, and proof-of-concept exploits.
Bearsthemes products with known CVEs
Bearsthemes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-1311 | High | 8.8 | 2026-02-26 | The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality. Th… |
CVE-2025-10690 | Critical | 9.8 | 2025-09-19 | The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the… |
CVE-2025-10134 | Critical | 9.1 | 2025-09-09 | The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone… |
CVE-2025-5396 | Critical | 9.8 | 2025-07-17 | The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0. This is due to the bbackup_ajax_handl… |
CVE-2025-5394 | Critical | 9.8 | 2025-07-15 | The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on th… |
CVE-2025-5393 | Critical | 9.1 | 2025-07-15 | The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati… |
CVE-2023-35776 | Medium | 6.5 | 2023-06-19 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions. |