Vulnerabilidades do Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin: 2 registro(s), com versões afetadas e correções.
CVE-2025-10304
Média · 5.3
CWE-862 03/12/2025
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the process_status_unlink() function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to delete the back-up progress files and cause a back-up to fail while it is in progress.
CVE-2025-11380
Média · 5.9
CWE-862 11/10/2025
Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to retrieve back-up file locations that can be subsequently accessed and downloaded. This does require a back-up to be running in order for an attacker to retrieve the back-up location.