WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure
CVE-2023-52185

5.3MEDIUM

Key Information:

Vendor: Wordpress
Status: Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin
Vendor: CVE Published:; 31 December 2023

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin: from n/a through 2.1.9.

Affected Version(s)

Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.1.9

References

https://patchstack.com/database/vulnerability/everest-bac...

vdb-entry

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Dec 31, 2023
Vulnerability Reserved
Dec 29, 2023

Credit

Joshua Chan (Patchstack Alliance)