Everestthemes vulnerabilities
We track 4 vulnerabilities in Everestthemes products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 31, 2025.
Latest Everestthemes vulnerabilities
- 8.1 High severity
Everest Backup: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through <= 2.3.11.
- 7.5 High severity
Grace Mag: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag grace-mag allows PHP Local File Inclusion.This issue affects Grace Mag: from n/a through <= 1.1.5.
- 7.5 High severity
Everest Backup – WordPress Cloud Backup…: Insecure Storage of Sensitive Information
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. Thi
- 7.5 High severity
Everest Backup – WordPress Cloud Backup…: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plug