Vulnerabilities > CVE-2023-52185 - Unspecified vulnerability in Everestthemes Everest Backup

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

everestthemes

NVD

Published: 2023-12-31

Updated: 2024-01-05

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin: from n/a through 2.1.9.

Vulnerable Configurations

Part	Description	Count
Application	Everestthemes Everestthemes Everest Backup - Everestthemes Everest Backup 1.0.0 Everestthemes Everest Backup 1.0.1 Everestthemes Everest Backup 1.0.2 Everestthemes Everest Backup 1.0.3 Everestthemes Everest Backup 1.0.4 Everestthemes Everest Backup 1.0.5 Everestthemes Everest Backup 1.0.6 Everestthemes Everest Backup 1.0.7 Everestthemes Everest Backup 1.0.8 Everestthemes Everest Backup 1.0.9 Everestthemes Everest Backup 1.1.0 Everestthemes Everest Backup 1.1.1 Everestthemes Everest Backup 1.1.2 Everestthemes Everest Backup 1.1.3 Everestthemes Everest Backup 1.1.4 Everestthemes Everest Backup 1.1.5 Everestthemes Everest Backup 1.1.6 Everestthemes Everest Backup 1.1.7 Everestthemes Everest Backup 2.0.0 Everestthemes Everest Backup 2.0.1 Everestthemes Everest Backup 2.0.2 Everestthemes Everest Backup 2.1.0 Everestthemes Everest Backup 2.1.1 Everestthemes Everest Backup 2.1.2 Everestthemes Everest Backup 2.1.3 Everestthemes Everest Backup 2.1.4 Everestthemes Everest Backup 2.1.5 Everestthemes Everest Backup 2.1.6 Everestthemes Everest Backup 2.1.7 Everestthemes Everest Backup 2.1.8 Everestthemes Everest Backup 2.1.9	32

References

https://patchstack.com/database/vulnerability/everest-backup/wordpress-everest-backup-plugin-2-1-9-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve