CVE-2024-10028
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. This makes it possible for unauthenticated attackers to obtain an archive file name and download the site's backup.
| CWE | CWE-922 |
| Vendor | everestthemes |
| Product | everest backup – wordpress cloud backup, migration, restore & cloning plugin |
| Published | Nov 5, 2024 |
| Last Updated | Apr 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin
Be the first to know when new high vulnerabilities affecting everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
everestthemes / Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin
0 ≤ 2.2.13
References
Credits
Flo