Vendor

    Everest themes

    19 known vulnerabilities in products by Everest themes, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Everest themes
    HighCVE-2026-39802

    WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability

    		8.1
    CriticalCVE-2026-66472

    WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

    		9.3
    HighCVE-2025-39360

    WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability

    		7.5
    MediumCVE-2026-125853

    WordPress Everest Backup plugin <= 2.3.14 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2023-7201

    Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload

    		6.5
    HighCVE-2024-10028

    Everest Backup: Insecure Storage of Sensitive Information

    		7.5
    MediumCVE-2025-11380

    Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

    		5.9
    HighCVE-2023-41237

    WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2023-41235

    WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2023-27421

    WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2024-32531

    WordPress GuCherry Blog theme <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    HighCVE-2023-27412

    WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2023-27420

    WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2023-27419

    WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2025-62992

    WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability

    		6.5
    MediumCVE-2025-62946

    WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability

    		5.3
    HighCVE-2023-52185

    WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure

    		5.3
    MediumCVE-2025-10304

    Missing Authorization (CVE-2025-10304)

    		5.3
    MediumCVE-2025-49238

    WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

    		4.3

    Products

    Products by Everest themes
    Everest Backup100
    Everest Backup – Wordpress Cloud Backup, Migration, Restore & Cloning Plugin40