Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: everestthemes Component: Everest Backup Clear all filters
TI-2024-09308 CVE-2024-10028 · GHSA-p3g3-h276-v53f

Insecure storage of sensitive information in everestthemes Everest Backup – WordPress…

Priority LOW 39

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00457 Published 2024-11-05 No fix listed CWE-922
TI-2023-06587 CVE-2023-7201 · GHSA-jw3q-hfmw-wpqw

Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload

Priority MEDIUM 62

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be al…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00649 Published 2024-04-15 Fixed in 2.2.5
TI-2023-28613 CVE-2023-52185 · GHSA-5pqp-2mmm-qc3c

WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud B…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00453 Published 2023-12-31 No fix listed CWE-200