3 matches found
CVE-2025-5394
๐จ CVE-2025-5394 - Unauthenticated Arbitrary Plugin Upload in Alone Theme ๐ Affected Product: Alone โ Charity Multipurpose Non-profit WordPress Theme Versions: ๐ Example Usage: python3 CVE-2025-5394.py -help usage: CVE-2025-5394.py...
9.8CVSS6.5AI score0.53462EPSS
SaveExploits3References1
Exploit for CVE-2025-5394
CVE-2025-5394 Alone โ Charity Mu...
9.8CVSS5.5AI score0.53462EPSS
SaveExploits3
CVE-2025-5393
The Alone โ Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the aloneimportpackrestoredata function in all versions up to, and including, 7.8.5. This makes it possible for unauthenticated...
9.1CVSS0.00599EPSS
SaveExploits0References2
20