Skip to content
PluginCanary

Everest Backup

Everest Backup - WordPress Cloud Backup, Migration, Restore & Cloning Plugin
by everestthemes · 3,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical

Avoid: vulnerability published 6 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Everest Backup
Ownership100
Maintenance100
Security0
Support70
Reputation70

How the score works

Quick answers

Is Everest Backup still maintained?
Yes. Last release 20 Aug 2026, 14 releases in the last 24 months. 20 Aug 2026 · wordpress.org
Who owns Everest Backup, and has it changed hands?
No change recorded. Main committer everestthemes since Oct 2021. 3 Nov 2026 · SVN log
Was Everest Backup removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Everest Backup safe?
No. 1 known vulnerability has no fix in the current version. 6 Oct 2026 · Wordfence Intelligence
Is the latest Everest Backup update safe to install?
No ownership change before 2.3.13. No one-star spike after it. 20 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 6 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.20 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 Oct 2021 to 6 Oct 2021, 1 commits
everestthemes18 Oct 2021 to 4 Nov 2026, 64 commits

2 committers recorded. No ownership change since 2021.

Maintenance

Last release
3 months ago
Releases, 24 months
14
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Everest Backup
Q1 20242
Q2 20244
Q3 20244
Q4 20242
Q1 20254
Q2 20251
Q3 20251
Q4 20254
Q1 20261
Q2 20260
Q3 20262
Q4 20260

Last release 20 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star38
4 star0
3 star1
2 star1
1 star5

Security record

8 vulnerabilities in 24 months (10 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
6 Oct 2026Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.13 - Unauthenticated Remote Code Execution9.8<= 2.3.13No fixn/a
Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
10 Aug 2026Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.12 - Unauthenticated SQL Injection7.5<= 2.3.122.3.1311
31 Dec 2025Everest Backup <= 2.3.9 - Cross-Site Request Forgery4.3<= 2.3.9Not affectedn/a
2 Dec 2025Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failure5.3<= 2.3.82.3.9Patched before disclosure
10 Oct 2025Everest Backup <= 2.3.8 - Missing Authorization5.3<= 2.3.82.3.943
10 Oct 2025Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure5.9<= 2.3.52.3.6Patched before disclosure
5 Jun 2025Everest Backup <= 2.3.3 - Cross-Site Request Forgery4.3<= 2.3.32.3.4Patched before disclosure
5 Nov 2024Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log7.5<= 2.2.132.2.14Patched before disclosure
25 Mar 2024Everest Backup <= 2.2.4 - Authenticated (Admin+) Arbitrary File Upload7.2<= 2.2.42.2.5Patched before disclosure
29 Dec 2023Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File7.5< 2.2.02.2.0Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Everest Backup
4 May 2026107
11 May 2026158
18 May 2026138
25 May 2026170
1 Jun 2026149
8 Jun 2026137
15 Jun 2026169
22 Jun 2026144
29 Jun 2026147
6 Jul 2026152
13 Jul 2026168
20 Jul 2026142
27 Jul 20261,351
3 Aug 2026832
10 Aug 2026331
17 Aug 20261,777
24 Aug 2026502
31 Aug 2026365
7 Sep 2026291
14 Sep 2026301
21 Sep 2026280
28 Sep 2026349
5 Oct 2026357
12 Oct 2026366
19 Oct 2026371
26 Oct 2026355
2 Nov 202655

Weekly downloads over the last 4 weeks are 20% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

BlogVault Backup & StagingScore 91 · 80,000+Jetpack VaultPress BackupScore 91 · 20,000+Jetpack VaultPressScore 91 · 10,000+BackuplyScore 90 · 600,000+Royal WordPress Backup, RestoreScore 90 · 30,000+

Facts

Version2.3.13
Authoreverestthemes
Added18 Oct 2021
Last updated20 Aug 2026
Active installs3,000+
Requires WordPress5.6
Tested up to7.0.8
Requires PHP7.4
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsclone, backup, pCloud, migration, migrate WordPress

Questions

Is Everest Backup still maintained?

Yes. Last release 20 Aug 2026, 14 releases in the last 24 months.

Who owns Everest Backup, and has it changed hands?

No change recorded. Main committer everestthemes since Oct 2021.

Was Everest Backup removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Everest Backup safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest Everest Backup update safe to install?

No ownership change before 2.3.13. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue