All 4 CVE vulnerabilities found in Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin, with AI-generated Chinese analysis, references, and POCs.
Vendor: Everestthemes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-10304 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure CWE-862 | 5.3 | Medium | 2025-12-03 |
| CVE-2025-11380 | Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure CWE-862 | 5.9 | Medium | 2025-10-11 |
| CVE-2024-10028 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log CWE-922 | 7.5 | High | 2024-11-05 |
| CVE-2023-52185 | WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure CWE-200 | 5.3 | Medium | 2023-12-31 |
All 4 known CVE vulnerabilities affecting Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin with full Chinese analysis, references, and POCs where available.