The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Everest Backup Plugin | — | Update everest-backup plugin to version 2.2.5, or a newer patched version | May 15, 2025 | Mar 25, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub