The Goza - Nonprofit Charity WordPress Theme theme for is vulnerable to arbitrary file deletion due insufficient path validation in the alone_import_pack_restore_data() function all versions up to, and including, 3.2.2. This makes it possible unauthenticated attackers delete files on server, which can easily lead remote code execution when right deleted (such as wp-config.php).