CVE-2024-10028CWE-922

Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log

High · published November 5, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. This makes it possible for unauthenticated attackers to obtain an archive file name and download the site's backup.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.6th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2024-11-05T23:28Z
EPSS history
Timeline
  • 05 NOV 23:28Z
    Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log
    cvelistv5