Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total3
Critical0
High1
Medium2
Reset
Showing 1-3 of 3 records
Threat Entry Updated 2024-11-08

CVE-2024-10028 - Everest Backup Plugin

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. This makes it possible for unauthenticated attackers to obtain an archive file name and download the site's backup.

PLUGIN Everest Backup

CVE-2024-10028

HIGH CVSS 7.5 2024-11-06
Threat Entry Updated 2025-05-08

CVE-2023-7201 - Everest Backup Plugin

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

PLUGIN Everest Backup

CVE-2023-7201

MEDIUM CVSS 6.5 2024-04-15
Threat Entry Updated 2024-11-21

CVE-2023-52185 - Everest Backup Plugin

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin: from n/a through 2.1.9.

PLUGIN Everest Backup

CVE-2023-52185

MEDIUM CVSS 5.3 2023-12-31
Scroll to top