Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin: 2 record(s), with affected versions and fixes.
CVE-2025-10304
Medium · 5.3
CWE-862 Dec 3, 2025
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the process_status_unlink() function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to delete the back-up progress files and cause a back-up to fail while it is in progress.
CVE-2025-11380
Medium · 5.9
CWE-862 Oct 11, 2025
Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to retrieve back-up file locations that can be subsequently accessed and downloaded. This does require a back-up to be running in order for an attacker to retrieve the back-up location.