Bearsthemes

7 CVEs across 5 Bearsthemes products. Browse Bearsthemes vulnerabilities, severities, and proof-of-concept exploits.

Bearsthemes products with known CVEs

ProductCVEs
Alone – Charity Multipurpose Non-Profit WordPress Theme2
Goza - Nonprofit Charity WordPress Theme2
Bears Backup1
Sermons Online1
Worry Proof Backup1
Bearsthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1311High8.82026-02-26The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality. Th…
CVE-2025-10690Critical9.82025-09-19The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the…
CVE-2025-10134Critical9.12025-09-09The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone…
CVE-2025-5396Critical9.82025-07-17The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0. This is due to the bbackup_ajax_handl…
CVE-2025-5394Critical9.82025-07-15The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on th…
CVE-2025-5393Critical9.12025-07-15The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati…
CVE-2023-35776Medium6.52023-06-19Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions.