11 matches found
CVE-2026-13158
CVE-2026-13158: Everest Toolkit 빠른 링크: DEV.to 글에서 전체 심층 기술 권고를 읽거나 연구원의 공식 사이버보안 포트폴리오를 확인하세요. 📌 요약 및 기술 메타데이터 매개변수| 기술 사양 ---|--- 취약점 식별자| CVE-2026-13158 대상 소프트웨어| Everest Toolkit WordPress 플러그인 플러그인 슬러그| everest-toolkit 취약한 버전| = 1.2.3 취약점 클래스| 위험한 유형의 파일 무제한 업로드 CWE-434 / OWASP A03 CVSS v3.1 점...
Exploit for CVE-2026-13158
CVE-2026-13158: Everest Toolkit Quick Links: Read the ful...
CVE-2026-13158
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...
CVE-2026-13158
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...
EUVD-2026-51714
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...
WordPress Everest Toolkit plugin <= 1.2.3 - Admin+ Arbitrary File Upload vulnerability
Admin+ Arbitrary File Upload vulnerability discovered by Huynh Kien Minh in WordPress Plugin Everest Toolkit versions = 1.2.3...
CVE-2026-13158 Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...
CVE-2026-13158 Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...
CVE-2026-13158
The Everest Toolkit WordPress plugin (versions 1.2.3 , implement strict whitelisting via wp_handle_upload(), and disable script execution in the uploads directory using .htaccess or Nginx rules. Proof-of-concept exploits for this vulnerability have been published in the wild.
PT-2026-67025
Name of the Vulnerable Software and Affected Versions Everest Toolkit versions prior to 1.2.4 Description Insufficient validation of uploaded file types occurs during the demo-content import process because the WordPress file-type test is disabled. This allows high-privilege users, such as...
CVE-2026-13158: Unrestricted Upload of File with Dangerous Type
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...