The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin suffers from an insecure storage vulnerability (CWE-922) in all versions up to 2.2.13. Specifically, the process stats file generated during backup is exposed and accessible without authentication, allowing attackers to discover backup archive file names and subsequently download the backup archives. This vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality but not integrity or availability.

An unauthenticated attacker can obtain the names of backup archive files and download them, leading to exposure of potentially sensitive site data contained in backups. This compromises the confidentiality of the affected WordPress site data. There is no indication of impact on data integrity or availability.

No official patch or fix is currently available for this vulnerability. Users of the Everest Backup plugin should monitor the vendor's advisory channels for updates. Until a fix is released, consider disabling the plugin or restricting access to backup-related files and directories via web server configuration to prevent unauthorized access. Avoid exposing backup files publicly.