Everest Toolkit vulnerabilities
We track 1 vulnerability in Everest Toolkit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Everest Toolkit vulnerabilities
- 7.2 High severity
Everest Toolkit: Unrestricted Upload of File with Dangerous Type
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-privilege users (Administrator by default, including non-super-admin site admin