CVE-2023-7201

MEDIUM

6.5

Descripcion

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Detalles CVE

Puntuacion CVSS v3.16.5

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosHIGH

Interaccion usuarioNONE

Publicado4/15/2024

Ultima modificacion5/8/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

everestthemes:everest_backup

Referencias

https://wpscan.com/vulnerability/64ba4461-bbba-45eb-981f-bb5f2e5e56e1/(contact@wpscan.com)

https://wpscan.com/vulnerability/64ba4461-bbba-45eb-981f-bb5f2e5e56e1/(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.