What’s Vulnerable › Products

everestthemes Everest Backup vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your everestthemes Everest Backup version is affected

Latest everestthemes Everest Backup vulnerabilities

• CVE-2026-39802 — WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability (CVSS 8.1)
• CVE-2026-66472 — WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-62992 — WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.1)
• CVE-2025-10304 — Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure (CVSS 5.3)
• CVE-2025-62946 — WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-11380 — Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure (CVSS 5.9)
• CVE-2025-49238 — WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
• CVE-2024-10028 — Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log (CVSS 7.5)
• CVE-2023-7201 — Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload (CVSS 6.5)
• CVE-2023-52185 — WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure (CVSS 7.5)