The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin contains a missing capability check vulnerability (CWE-862) in the 'everest_process_status' AJAX action in all versions up to 2.3.5. This flaw permits unauthenticated attackers to retrieve backup file locations during an active backup process. The vulnerability requires a backup to be running to exploit and does not grant write or availability impact. The CVSS 3.1 base score is 5.9 (medium), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, and impact limited to confidentiality.

An attacker without authentication can obtain backup file locations if a backup is running, potentially exposing sensitive data stored in backups. There is no indication of integrity or availability impact. No known exploits in the wild have been reported. The vulnerability could lead to unauthorized disclosure of backup data if the backup files are accessible once their locations are known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the WordPress admin AJAX endpoint and monitor backup processes. Consider disabling the plugin or the affected AJAX action if feasible during backup operations to reduce exposure.