Description
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| everestthemes | Everest Backup | ≤ 2.3.12 | — |
Critical · 9.3
CVE-2026-66472
EUVD-2026-57890GHSA-rx3x-8jh6-43rp
WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability
Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack