Skip to content
OpenAdvisories

Vendor

Everest themes

17 known vulnerabilities.

Everest themes at a glance

Last 12 months
4
Critical · all time
1
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 2 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability, 1 critical September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202611
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202520
Nov 202500
Oct 202520
Sep 202500
Aug 202500
Jul 202500
Jun 202510
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Everest Backup 5 Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin 4 Grace Mag 1 Arya Multipurpose Pro 1 Arya Multipurpose 1 Mocho Blog 1 Everest News Pro 1 Everest News 1 Viable Blog 1 GuCherry Blog 1
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • High 8.1
    CVE-2026-39802

    WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability

    Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.

    Everest themes Everest Backup
  • Critical 9.3
    CVE-2026-66472

    WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.

    Everest themes Everest Backup
  • Medium 6.5
    CVE-2025-62992

    WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through <= 2.3.11.

    Everest themes Everest Backup
  • Medium 5.3
    CVE-2025-10304

    Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure

    The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the process_status_unlink() function in all versions up to, and including, 2.3.8. T…

    Everest themes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Web / CMS
  • Medium 5.3
    CVE-2025-62946

    WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through <= 2.3.8.

    Everest themes Everest Backup
  • Medium 5.9
    CVE-2025-11380 Public exploit

    Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

    The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX action in all versions up to, and includi…

    Everest themes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Web / CMS
  • Medium 4.3
    CVE-2025-49238

    WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request Forgery.This issue affects Everest Backup: from n/a through <= 2.3.3.

    Everest themes Everest Backup
  • High 7.5
    CVE-2025-39360

    WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag grace-mag allows PHP Local File Inclusion.This issue affects Grace Mag: from n/a through <= 1.1.5.

    Everest themes Grace Mag
  • High 7.5
    CVE-2024-10028

    Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log

    The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. Th…

    Everest themes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Web / CMS
  • High 7.1
    CVE-2024-32531

    WordPress GuCherry Blog theme <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected XSS.This issue affects GuCherry Blog: from n/a through 1.1.8.

    Everest themes GuCherry Blog
  • Medium 5.3
    CVE-2023-52185

    WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plu…

    Everest themes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Web / CMS
  • High 7.1
    CVE-2023-41237

    WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versions.

    Everest themes Arya Multipurpose Pro
  • High 7.1
    CVE-2023-41235

    WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions.

    Everest themes Everest News Pro
  • High 7.1
    CVE-2023-27412

    WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions.

    Everest themes Mocho Blog
  • High 7.1
    CVE-2023-27421

    WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <= 1.1.0 versions.

    Everest themes Everest News
  • High 7.1
    CVE-2023-27420

    WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions.

    Everest themes Arya Multipurpose
  • High 7.1
    CVE-2023-27419

    WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Viable Blog theme <= 1.1.4 versions.

    Everest themes Viable Blog