Skip to content

Known vulnerabilities in Everestthemes Everest Backup

Is your version affected?

CVE Summary Score Published
CVE-2026-39802 Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions 8.1 High Oct 10, 2026
CVE-2026-66472 Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions 9.3 Critical Aug 13, 2026
CVE-2025-62992 Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path… 6.5 Medium Dec 31, 2025
CVE-2025-62946 Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly… 5.3 Medium Oct 27, 2025
CVE-2025-49238 Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request… 4.3 Medium Jun 6, 2025

Other Everestthemes products