Exploit / PoCcritical
Attackers actively exploit critical zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-5394 | Unauthenticated Arbitrary File Upload to RCE in Alone WordPress Theme | 9.8 | 52% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 193.84.71.244 | r 120,900 exploit attempts. Several IP addresses, including 193.84.71.244 and 87.120.92.24, are responsible for tens of thousands of |
| ipv4 | 87.120.92.24 | attempts. Several IP addresses, including 193.84.71.244 and 87.120.92.24, are responsible for tens of thousands of malicious request |
From the original article
2 min read at securityaffairs.com
Hackers exploit a critical vulnerability, tracked as CVE-2025-5394 (CVSS score of 9. 8), in the Alone WordPress theme to hijack sites. Threat actors are actively exploiting a critical flaw, tracked as CVE-2025-5394 (CVSS score of 9.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.