Everest Backup WordPress Plugin Missing Authorization Vulnerability Allows Unauthenticated Backup Interference

A vulnerability exists in the Everest Backup WordPress plugin, specifically in versions through 2.3.8. The issue arises from a missing capability check in the process_status_unlink() function, which allows unauthenticated users to delete backup progress files. This deletion can cause ongoing backup processes to fail.

Impact

Exploitation of this vulnerability can disrupt active backup processes, causing them to fail prematurely.

Reproduction

The vulnerability can be reproduced by sending a request to the 'wp_ajax_everest_backup_process_status_unlink' action without the necessary authorization. This can be done by an unauthenticated user, as the action is available to both authenticated and non-authenticated users.

Remediation

Users are advised to update the Everest Backup WordPress plugin to version 2.3.9 or later.