Medium · 6.5 CVE-2025-62992 EUVD-2025-205910GHSA-7f2c-fvqj-vm63

WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Everest themes Product: Everest Backup

Description

Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through <= 2.3.11.

Affected products

Vendor	Product	Affected	Fixed
everestthemes	Everest Backup	≤ 2.3.11	—

References

https://patchstack.com/database/Wordpress/Plugin/everest-backup/vulnerability/wordpress-everest-backup-plugin-2-3-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry