Log in Start free

Bearsthemes

Products

ProductCVEsExploitedLatest
Alone – Charity Multipurpose Non-profit WordPress Theme2–Jul 15, 2025
Goza - Nonprofit Charity WordPress Theme2–Sep 19, 2025
Bears Backup1–Jul 17, 2025
Worry Proof Backup1–Feb 26, 2026

Exploited and recent CVEs

  • CVE-2026-1311 High 8.8 Worry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload 0.8%
  • CVE-2025-10690 Critical 9.8 Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation 0.8%
  • CVE-2025-10134 Critical 9.1 Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion 0.6%
  • CVE-2025-5396 Critical 9.8 Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution 0.9%
  • CVE-2025-5394 Critical 9.8 Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation 53.2%
  • CVE-2025-5393 Critical 9.1 Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Deletion 0.6%