An authenticated remote code execution vulnerability in the Everest Toolkit WordPress plugin allows administrators to execute arbitrary code, with a known proof-of-concept available.

The plugin fails to validate file types during the demo-content import process, as it explicitly disables standard WordPress safety checks. This allows an authenticated administrator to upload executable PHP scripts to the server.

With a CVSS score of 7.2, this vulnerability poses a significant threat to the integrity and availability of the host server. Successful exploitation allows for complete remote code execution, which could result in the total compromise of the WordPress environment, unauthorized data access, and potential lateral movement within the network.

Immediate Action: Update the Everest Toolkit plugin to version 1.2.4 or later immediately to resolve the file validation issue.

Proactive Monitoring: Review web server logs for suspicious file upload activity or requests to unexpected PHP files within the plugin directories.

Compensating Controls: Use a Web Application Firewall to restrict file uploads to authorized types and monitor administrative actions within the WordPress dashboard for suspicious activity.

Public Exploit Available: Yes (public PoC exists)

Given that a proof-of-concept exploit is publicly available, this vulnerability carries an elevated risk. All organizations using the Everest Toolkit plugin must move to version 1.2.4 or later as a matter of urgency to prevent potential remote code execution attacks against their web infrastructure.