CVE-2025-5394Active Exploitation

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This makes it possible for unauthenticated attackers to upload zip files containing webshells disguised as plugins from remote locations to achieve remote code execution. CVE-2025-54019 is likely a duplicate of this.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-862

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Active exploitation appears in 2 classified signals
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 2 signals
Patch or workaround mentioned in 1 signal
Peaked 1d ago at 1 mentions (2026-06-01); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Active Exploitation

2100.0%

Referenced assets1 URL

By indicator

https://f.mtr.cool/pcromrhovu

Full discourse2 posts

MalCare@malcaresecurity98d
Active Exploitation
Vulnerabilities continue to emerge. For example, the Alone WordPress theme vulnerability, tracked as CVE-2025-5394, reportedly saw over 120,000 exploitation attempts before many sites were patched. That is why security cannot be treated as a one-time setup.
Post summary
CVE-2025-5394, affecting the Alone WordPress theme, saw over 120,000 exploitation attempts before many sites applied patches, underscoring active exploitation in the wild.
1000055
546 followersView on X
@pedri77@pedri77136d
Active Exploitation
Threat actors are actively exploiting a critical security flaw in "Alone – Charity Multipurpose Non-profit WordPress Theme" to take over susceptible sites. The vulnerability, tracked as CVE-2025-5394, carries ... https://f.mtr.cool/pcromrhovu
Post summary
CVE-2025-5394 is currently being exploited in the wild against sites using the 'Alone' WordPress theme, but no PoC, exploit code, patch, or technical details have been disclosed.
0000032
2.1K followersView on X

Explore more

Back to dashboard