Vulnerabilities in everestthemes
9 resultsVexday analysis
Everestthemes apresenta 7 vulnerabilidades catalogadas, nenhuma com evidência de exploração ativa (KEV) ou classificação crítica. A fraqueza dominante é autorização inadequada (CWE-862), indicando falhas no controle de acesso. Sem publicações recentes (últimos 90 dias), o risco atual é baixo, mas a natureza das falhas sugere atenção contínua ao modelo de segurança da plataforma.
CVE-2025-39360HIGHWordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2024-10028HIGHEverest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat LogEPSS 0.5%CVE-2023-52185MEDIUMWordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data ExposureEPSS 0.5%CVE-2025-11380MEDIUMEverest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information ExposureEPSS 0.4%CVE-2025-62946MEDIUMWordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-66472CRITICALWordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-10304MEDIUMEverest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup FailureEPSS 0.2%CVE-2025-62992MEDIUMWordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-49238MEDIUMWordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%