Everestthemes Everest Backup vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Everestthemes Everest Backup: 4 record(s), with affected versions and fixes.cpe:2.3:a:everestthemes:everest_backup
CVE-2026-39802
High · 8.1
CWE-94 Oct 10, 2026
WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
CVE-2026-66472
Critical · 9.3
CWE-89 Aug 13, 2026
WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
CVE-2025-62992
High · 8.1
CWE-352 Dec 31, 2025
WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through <= 2.3.11.
CVE-2025-62946
Medium · 5.3
CWE-862 Oct 26, 2025
WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through <= 2.3.8.