Everestthemes Everest Backup — known CVE vulnerabilities

Every CVE whose affected-product data names Everestthemes Everest Backup, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-10028 — CVSS 7.5 (high): The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive…
• CVE-2023-7201 — CVSS 6.5 (medium): The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such…
• CVE-2025-62992 — CVSS 6.5 (medium): Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects…
• CVE-2023-52185 — CVSS 5.3 (medium): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup…