CVE · Medium

CVE-2026-125853 — Missing Authorization

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-125853 Missing Authorization Missing Authorization Medium 6.5 < 2.3.15 2.3.15 2026-11-13 —

CVE-2026-125853 is a Missing Authorization vulnerability in the WordPress plugin everest-backup (everest-backup). Versions up to and including 2.3.15 are affected; no patched version is recorded. CVSS score: 6.5 (Medium). Published 2026-11-13.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.