Cross-Site Request Forgery Vulnerability in Everest Backup by Everest Themes
CVE-2025-62992

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Everest Backup
Vendor
CVE Published:
31 December 2025

What is CVE-2025-62992?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Everest Backup plugin developed by Everest Themes, which can potentially allow an attacker to perform unauthorized actions on behalf of an authenticated user. This vulnerability affects versions prior to 2.3.9, leading to possible path traversal that could expose sensitive information.

Affected Version(s)

Everest Backup 0 <= 2.3.11

References

https://patchstack.com/database/Wordpress/Plugin/everest-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 | Patchstack Bug Bounty Program
.