Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin

Information

Software Type Plugin
Software Slug everest-backup (view on wordpress.org)
Software Status Active
Software Author everestthemes
Software Website wpeverestbackup.com
Software Downloads 149,807
Software Active Installs 3,000
Software Record Last Updated July 21, 2026

8 Vulnerabilities

Submit a Vulnerability
Everest Backup <= 2.3.9 - Cross-Site Request Forgery
4.3
CVE-2025-62992
Dec 31, 2025
Researcher: 0xd4rk5id3
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure
5.3
CVE-2025-10304
Dec 2, 2025
Researcher: Jonas Benjamin Friedli
Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure
5.9
CVE-2025-11380
Oct 10, 2025
Researcher: netranger
Everest Backup <= 2.3.8 - Missing Authorization
5.3
CVE-2025-62946
Oct 10, 2025
Researcher: Legion Hunter
Everest Backup <= 2.3.3 - Cross-Site Request Forgery
4.3
CVE-2025-49238
Jun 5, 2025
Researcher: domiee13
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
7.5
CVE-2024-10028
Nov 5, 2024
Researcher: floerer
Everest Backup <= 2.2.4 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-7201
Mar 25, 2024
Researcher: emad
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
7.5
CVE-2023-52185
Dec 29, 2023
Researcher: Joshua Chan
Title Status CVE ID CVSS Researchers Date
Everest Backup <= 2.3.9 - Cross-Site Request Forgery Unpatched CVE-2025-62992 4.3 0xd4rk5id3 December 31, 2025
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure Patched CVE-2025-10304 5.3 Jonas Benjamin Friedli December 2, 2025
Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure Patched CVE-2025-11380 5.9 netranger October 10, 2025
Everest Backup <= 2.3.8 - Missing Authorization Patched CVE-2025-62946 5.3 Legion Hunter October 10, 2025
Everest Backup <= 2.3.3 - Cross-Site Request Forgery Patched CVE-2025-49238 4.3 domiee13 June 5, 2025
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log Patched CVE-2024-10028 7.5 floerer November 5, 2024
Everest Backup <= 2.2.4 - Authenticated (Admin+) Arbitrary File Upload Patched CVE-2023-7201 7.2 emad March 25, 2024
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File Patched CVE-2023-52185 7.5 Joshua Chan December 29, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation