Alone – Charity Multipurpose Non-profit WordPress Theme

Alone – Charity Multipurpose Non-profit WordPress Theme has 5 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 9.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 5 critical and 0 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Code Injection, behind 3 of the records (60%). Other recurring categories include External Control Of File Name Or Path, Missing Authorization.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, most of them (2) reported by Thái An.