Read the docs

everestthemes

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

everestthemes records in CISA KEV

No everestthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Everest Backup 4 records MEDIUM Everest News 2 records LOW Arya Multipurpose 1 record LOW Arya Multipurpose Theme 1 record LOW Gucherry Blog 1 record LOW Mocho Blog 1 record LOW Viable Blog 1 record LOW

Records

4 records in Everest Backup · all components

TI-2023-06587 CVE-2023-7201 · GHSA-jw3q-hfmw-wpqw

Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload

Priority MEDIUM 62

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be al…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00649 Published 2024-04-15 Fixed in 2.2.5
TI-2024-09308 CVE-2024-10028 · GHSA-p3g3-h276-v53f

Insecure storage of sensitive information in everestthemes Everest Backup – WordPress…

Priority LOW 39

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00457 Published 2024-11-05 No fix listed CWE-922
TI-2023-28613 CVE-2023-52185 · GHSA-5pqp-2mmm-qc3c

WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud B…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00453 Published 2023-12-31 No fix listed CWE-200
Open these records in search →