TI-2026-70330 Aliases CVE-2026-39802 GHSA-h7mp-hvjp-2xxw

Remote code execution in WordPress Everest Backup plugin

LOW 38CWE-94Published 2026-10-10 · Updated 2026-10-11

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

The Everest Backup plugin for WordPress through 2.3.13 contains a code injection flaw (CWE-94) that lets input be treated as code the server runs. An unauthenticated remote attacker can execute code on an affected site without credentials or user interaction. The CVSS 3.1 base score of 8.1 (HIGH) rates impact to confidentiality, integrity and availability as high.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00448 39th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
everestthemes	Everest Backup	up to 2.3.13	—	No fix listed	CNA

Everest Backup Vendoreverestthemes Affected up to 2.3.13 Fixed in — No fix listed CNA

Remediation

No fixed version is listed for Everest Backup.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

2026-10-11 Threatist record created from CVE-2026-39802
2026-10-11 Alias added: GHSA-h7mp-hvjp-2xxw

References

Other 1

https://patchstack.com/database/wordpress/plugin/everest-backup/vulnerability/wordpress-everest-backup-plugin-2-3-13-remote-code-execution-rce-vulnerability?_s_id=cve

TI-2023-06587 Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload CVSS 3.1MEDIUM 6.5
TI-2026-47226 WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability CVSS 3.1CRITICAL 9.3
TI-2024-09308 Insecure storage of sensitive information in everestthemes Everest Backup – WordPress… CVSS 3.1HIGH 7.5
TI-2023-28613 WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure CVSS 3.1HIGH 7.5
TI-2025-26102 WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability CVSS 3.1HIGH 7.5
TI-2025-39140 WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability CVSS 3.1HIGH 8.1

See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences