Browse CVEs

HIGH 8.1 CVE-2025-62992 Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backu… Everest Backup after 2.3.9 Fix from $1,9502025-12-31 HIGH 7.5 CVE-2024-10028 The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure… Everest Backup 2.2.14+ Fix from $1,9502024-11-06 HIGH 7.1 CVE-2024-32531 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected X… Gucherry Blog after 1.1.8 Fix from $1,9502024-04-17 MEDIUM 6.5 CVE-2023-7201 The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin… Everest Backup 2.2.5+ Fix from $1,6002024-04-15 HIGH 7.5 CVE-2023-52185 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore… Everest Backup 2.2.0+ Fix from $1,9502023-12-31 MEDIUM 6.1 CVE-2023-41235 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions. Everest News after 1.1.7 Fix from $1,6002023-09-27 MEDIUM 6.1 CVE-2023-41237 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versions. Arya Multipurpose Theme after 1.0.8 Fix from $1,6002023-09-27 MEDIUM 6.1 CVE-2023-27421 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <= 1.1.0 versions. Everest News after 1.1.0 Fix from $1,6002023-08-08 MEDIUM 6.1 CVE-2023-27412 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions. Mocho Blog after 1.0.4 Fix from $1,6002023-08-08 MEDIUM 6.1 CVE-2023-27420 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions. Arya Multipurpose after 1.0.5 Fix from $1,6002023-06-16 MEDIUM 6.1 CVE-2023-27419 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Viable Blog theme <= 1.1.4 versions. Viable Blog after 1.1.4 Fix from $1,6002023-05-10