Everestthemes

Products

Product	CVEs	Exploited	Latest
Everest Backup	5	–	Oct 10, 2026
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin	4	–	Dec 3, 2025
Grace Mag	1	–	Apr 24, 2025

CVE-2026-39802 High 8.1 WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability 0.4%
CVE-2026-66472 Critical 9.3 WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability 0.4%
CVE-2025-62992 Medium 6.5 WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
CVE-2025-10304 Medium 5.3 Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure 0.2%
CVE-2025-62946 Medium 5.3 WordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability 0.3%
CVE-2025-11380 Medium 5.9 Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure 0.4%
CVE-2025-49238 Medium 4.3 WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
CVE-2025-39360 High 7.5 WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability 0.8%
CVE-2024-10028 High 7.5 Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log 0.5%
CVE-2023-52185 Medium 5.3 WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure 0.5%