Skip to content
OpenAdvisories

Vendor

Everest themes

18 known vulnerabilities.

Products

Everest Backup 6 Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin 4 Grace Mag 1 Arya Multipurpose Pro 1 Arya Multipurpose 1 Mocho Blog 1 Everest News Pro 1 Everest News 1 Viable Blog 1 GuCherry Blog 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.1
    CVE-2026-39802

    WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability

    Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.

    Everest themes Everest Backup
  • High 7.5
    CVE-2025-39360

    WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag grace-mag allows PHP Local File Inclusion.This issue affects Grace Mag: from n/a through <= 1.1.5.

    Everest themes Grace Mag
  • High 7.5
    CVE-2024-10028

    Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log

    The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. Th…

    Everest themes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Web / CMS
  • High 7.1
    CVE-2024-32531

    WordPress GuCherry Blog theme <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected XSS.This issue affects GuCherry Blog: from n/a through 1.1.8.

    Everest themes GuCherry Blog
  • High 7.1
    CVE-2023-41237

    WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versions.

    Everest themes Arya Multipurpose Pro
  • High 7.1
    CVE-2023-41235

    WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions.

    Everest themes Everest News Pro
  • High 7.1
    CVE-2023-27412

    WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions.

    Everest themes Mocho Blog
  • High 7.1
    CVE-2023-27421

    WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <= 1.1.0 versions.

    Everest themes Everest News
  • High 7.1
    CVE-2023-27420

    WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions.

    Everest themes Arya Multipurpose
  • High 7.1
    CVE-2023-27419

    WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Viable Blog theme <= 1.1.4 versions.

    Everest themes Viable Blog