CVE-2025-5394 impacts WordPress Theme

CVE-2025-5394 impacts WordPress Theme

Overview CVE-2025-5394 is a critical vulnerability discovered in the Alone – Charity Multipurpose Non-profit WordPress Theme (versions up to 7.8.3). The flaw exists in the alone_import_pack_install_plugin() function, which fails to…
WordPress WPLMS and VibeBP Vulnerabilities

WordPress WPLMS and VibeBP Vulnerabilities

Two widely-used WordPress plugins, WPLMS and VibeBP, have recently been discovered with critical vulnerabilities. These vulnerabilities, if left unaddressed, could potentially expose websites to severe security risks. This analysis provides…
WordPress WPForms flaw CVE-2024-11205

WordPress WPForms flaw CVE-2024-11205

A critical vulnerability has been discovered in Wordpress plugin WPForms. The flaw allows authenticated attackers with subscriber-level privileges or higher to execute unauthorized refunds of Stripe payments and cancellations of…