Product by Everest themes
Everest Backup
9 known vulnerabilities in Everest Backup (Everest themes), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-39802 | WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability | 8.1 | |
| Critical | CVE-2026-66472 | WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability | 9.3 | |
| Medium | CVE-2026-125853 | WordPress Everest Backup plugin <= 2.3.14 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2023-7201 | Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload | 6.5 | |
| High | CVE-2024-10028 | Everest Backup: Insecure Storage of Sensitive Information | 7.5 | |
| High | CVE-2025-62992 | WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability | 6.5 | |
| Medium | CVE-2025-62946 | WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability | 5.3 | |
| High | CVE-2023-52185 | WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure | 5.3 | |
| Medium | CVE-2025-49238 | WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability | 4.3 |