Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Everest Backup HIGH 8.1
CVE-2025-62992

Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backu…

Fix: after 2.3.9
Fix from $1,950 2025-12-31
Everest Backup HIGH 7.5
CVE-2024-10028

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure…

Fix: 2.2.14+
Fix from $1,950 2024-11-06
Gucherry Blog HIGH 7.1
CVE-2024-32531

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected X…

Fix: after 1.1.8
Fix from $1,950 2024-04-17
Everest Backup MEDIUM 6.5
CVE-2023-7201

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin…

Fix: 2.2.5+
Fix from $1,600 2024-04-15
Everest Backup HIGH 7.5
CVE-2023-52185

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore…

Fix: 2.2.0+
Fix from $1,950 2023-12-31
Everest News MEDIUM 6.1
CVE-2023-41235

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions.

Fix: after 1.1.7
Fix from $1,600 2023-09-27
Arya Multipurpose Theme MEDIUM 6.1
CVE-2023-41237

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versions.

Fix: after 1.0.8
Fix from $1,600 2023-09-27
Everest News MEDIUM 6.1
CVE-2023-27421

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <= 1.1.0 versions.

Fix: after 1.1.0
Fix from $1,600 2023-08-08
Mocho Blog MEDIUM 6.1
CVE-2023-27412

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions.

Fix: after 1.0.4
Fix from $1,600 2023-08-08
Arya Multipurpose MEDIUM 6.1
CVE-2023-27420

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions.

Fix: after 1.0.5
Fix from $1,600 2023-06-16
Viable Blog MEDIUM 6.1
CVE-2023-27419

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Viable Blog theme <= 1.1.4 versions.

Fix: after 1.1.4
Fix from $1,600 2023-05-10