Everestthemes vulnerabilities

Products

• Everest Backup 6
• Everest Backup 4
• Everest Backup – Wordpress Cloud Backup, Migration, Restore & Cloning Plugin 4
• Everest News 2

Newest

• everestthemes everest backup WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability CVE-2026-39802 8.1 HighOctober 10, 2026
• everestthemes everest backup WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability CVE-2026-66472 9.3 CriticalAugust 13, 2026
• everestthemes everest backup WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-62992 6.5 MediumDecember 31, 2025
• everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure CVE-2025-10304 5.3 MediumDecember 3, 2025
• everestthemes everest backup WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability CVE-2025-62946 5.3 MediumOctober 27, 2025
• everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure CVE-2025-11380 Public exploit 5.9 MediumOctober 11, 2025
• everestthemes everest backup WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-49238 4.3 MediumJune 6, 2025
• everestthemes grace mag WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability CVE-2025-39360 7.5 HighApril 24, 2025
• everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin, everest backup +1 more Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log CVE-2024-10028 7.5 HighNovember 5, 2024
• everest themes gucherry blog WordPress GuCherry Blog theme <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-32531 7.1 HighApril 17, 2024
• everestthemes everest backup Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload CVE-2023-7201 6.5 MediumApril 15, 2024
• everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin, everest backup +1 more WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure CVE-2023-52185 5.3 MediumDecember 31, 2023
• everest themes arya multipurpose pro, everestthemes arya multipurpose theme +1 more WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41237 7.1 HighSeptember 27, 2023
• everest themes news pro, everestthemes everest news +1 more WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41235 7.1 HighSeptember 27, 2023
• everest themes mocho blog WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27412 7.1 HighAugust 8, 2023
• everest themes news, everestthemes everest news +1 more WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27421 7.1 HighAugust 8, 2023
• everest themes arya multipurpose WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27420 7.1 HighJune 16, 2023
• everest themes viable blog WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27419 7.1 HighMay 10, 2023