Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2025/10/12 3:30 a.m.•38 views

CVE-2025-11380

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

5.9CVSS5.4AI score0.00401EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/11 3:30 a.m.•25 views

EUVD-2025-33805

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

5.9CVSS5AI score0.00401EPSS
SaveExploits1References3
NVD
NVD
•added 2025/10/11 3:15 a.m.•28 views

CVE-2025-11380

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

5.9CVSS0.00401EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/11 2:24 a.m.•15 views

CVE-2025-11380 Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits1References2
CVE
CVE
•added 2025/10/11 2:24 a.m.•52 views

CVE-2025-11380

CVE-2025-11380 affects the Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin. Public details in connected docs confirm a missing capability check on the AJAX action named ‘everest_process_status’ that can allow unauthenticated attackers to discover backup file locations...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/10/11 2:24 a.m.•38 views

CVE-2025-11380 Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

5.9CVSS0.00401EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•23 views

WordPress plugin Everest Backup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.9CVSS6.5AI score0.00401EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-7707

Malware in sbrugna...

7.8CVSS7.3AI score0.02216EPSS
SaveExploits5References5
RedhatCVE
RedhatCVE
•added 2025/10/02 3:50 a.m.•38 views

CVE-2025-10744

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and...

5.3CVSS6AI score0.00378EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/18 12:00 a.m.•8 views

CVE-2018-18487: Exposure of Sensitive Information to an Unauthorized Actor

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mtrand unsafely, resulting in predictable database backup file locations...

7.5CVSS7.2AI score0.01208EPSS
SaveExploits1References2
NVD
NVD
•added 2017/11/03 3:29 p.m.•43 views

CVE-2017-16513

Ipswitch WSFTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729...

7.8CVSS7.7AI score0.02216EPSS
SaveExploits5References3
osv_cve
osv_cve
•added 2017/11/03 3:29 p.m.•26 views

CVE-2017-16513

Ipswitch WSFTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729...

7.8CVSS6AI score0.02216EPSS
SaveExploits5References3
Cvelist
Cvelist
•added 2017/11/03 3:00 p.m.•50 views

CVE-2017-16513

Ipswitch WSFTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729...

7.6AI score0.02216EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/03 12:00 a.m.•5 views

CVE-2017-16513: Improper Restriction of Operations within the Bounds of a Memory Buffer

Ipswitch WSFTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729...

7.8CVSS7.4AI score0.02216EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2017/11/03 12:00 a.m.•1 views

PT-2017-14436

Name of the Vulnerable Software and Affected Versions Ipswitch WS FTP Professional versions prior to 12.6.0.3 Description The issue concerns buffer overflows in two specific fields: the local search field and the backup locations field. Recommendations For versions prior to 12.6.0.3, update to...

7.8CVSS0.02216EPSS
SaveExploits5References5
Rows per page
Query Builder