CVE-2023-7201

CVE-2023-7201 describes a vulnerability in the Everest Backup WordPress plugin prior to version 2.2.5. This flaw allows high-privilege users, such as administrators, to upload arbitrary files to the server due to insufficient validation of backup files, even in scenarios where such uploads should be restricted (e.g., multisite environments). Rated 6.5 (Medium) on the CVSS scale, the vulnerability has a network attack vector with low complexity, potentially leading to high confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.