CVE-2024-10028

🗓️ 06 Nov 2024 00:13:15Reported by WordfenceType

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin for WordPress is vulnerable to Sensitive Information Exposure through the exposed process stats file

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-10028	6 Nov 202400:15	–	nvd
Cvelist	CVE-2024-10028 Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log	5 Nov 202423:28	–	cvelist
Patchstack	WordPress Everest Backup Plugin <= 2.2.13 is vulnerable to Sensitive Data Exposure	5 Nov 202400:00	–	patchstack
Vulnrichment	CVE-2024-10028 Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log	5 Nov 202423:28	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 4, 2024 to November 10, 2024)	14 Nov 202419:29	–	wordfence

Nvd

Vulners

Vulnrichment

Node

everestthemes everest_backupRange<2.2.14wordpress

[
  {
    "vendor": "everestthemes",
    "product": "Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.2.13",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/9b871957-a2b3-492f-b461-7040d9098b2b
plugins	www.plugins.trac.wordpress.org/browser/everest-backup/tags/2.2.13/inc/classes/class-backup-directory.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Nov 2024 00:15Current

7.3High risk

Vulners AI Score7.3

CVSS37.5

EPSS0.001

SSVC

CWE-922