Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Vendor: everestthemes Clear all filters
TI-2025-09454 CVE-2025-10304 · GHSA-v5fw-6vxq-8m9q

Missing authorization in everestthemes Everest Backup – WordPress Cloud Backup…

Priority LOW 30

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the process_status_unlink() function in all…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2025-12-03 No fix listed CWE-862
TI-2025-39094 CVE-2025-62946 · GHSA-prvq-r6h5-gxw2

WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through <= 2.3.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00343 Published 2025-10-27 No fix listed CWE-862
TI-2025-10427 CVE-2025-11380 · GHSA-pg9r-phm7-7r5v

Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

Priority LOW 27

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX ac…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00401 Published 2025-10-11 No fix listed CWE-862
TI-2025-26102 CVE-2025-39360 · GHSA-c2hj-c545-q4g6

WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag grace-mag allows PHP Local File Inclusion.This issue affects Grace Mag: fro…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0076 Published 2025-04-24 No fix listed CWE-98
TI-2024-09308 CVE-2024-10028 · GHSA-p3g3-h276-v53f

Insecure storage of sensitive information in everestthemes Everest Backup – WordPress…

Priority LOW 39

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00457 Published 2024-11-05 No fix listed CWE-922
TI-2023-06587 CVE-2023-7201 · GHSA-jw3q-hfmw-wpqw

Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload

Priority MEDIUM 62

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be al…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00649 Published 2024-04-15 Fixed in 2.2.5
TI-2023-28613 CVE-2023-52185 · GHSA-5pqp-2mmm-qc3c

WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud B…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00453 Published 2023-12-31 No fix listed CWE-200