Beplusthemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Beplusthemes products: 2 record(s), with severity, exploitation and fixes.

Alone 1 Sermon'e 1

Exploited only (KEV) →

CVE-2026-48199 High · 7.5 CWE-862 Oct 6, 2026

WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.

CVE-2025-60206 Critical · 10.0 CWE-94 Oct 22, 2025

WordPress Alone theme <= 7.8.3 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Beplusthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through <= 7.8.3.