Everest Backup vulnerabilities

3 known CVE vulnerabilities in Everest Backup, translated and rated.

CVE-2026-39802High
The Everest Backup plugin versions up to 2.3.13 contain an unauthenticated Remote Code Execution (RCE) vulnerability.
CVE-2026-66472Critical
The Everest Backup plugin versions up to 2.3.12 contain an unauthenticated SQL Injection vulnerability. An attacker without logging in can send specially crafted queries that can manipulate the database.
CVE-2025-62946Medium
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through <= 2.3.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS