{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aeverestformseverest_formswordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:everestforms:everest_forms:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-115483"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Everest Forms Pro (\u003c= 3.6.3)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Everest Forms"],"content_html":"\u003cp\u003eEverest Forms plugin versions up to and including 3.6.3 contain an arbitrary file read vulnerability (CVE-2026-115483) within the \u003ccode\u003eattach_entry_files()\u003c/code\u003e function. The flaw occurs because the function performs a \u003ccode\u003efile_exists()\u003c/code\u003e check on entry fields with meta keys matching the pattern \u003ccode\u003e/signature_/\u003c/code\u003e without validating or restricting the file path before attaching them to notification emails. Exploitation requires the use of the Everest Forms Pro add-on, which provides the necessary signature field and email attachment functionality.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn unauthenticated attacker can exfiltrate sensitive server-side files, such as \u003ccode\u003ewp-config.php\u003c/code\u003e, which may contain database credentials and other configuration secrets. The exfiltrated data is delivered directly to an attacker-controlled email address via the plugin notification system.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Everest Forms Pro to the latest available version containing the security fix for CVE-2026-115483.\u003c/li\u003e\n\u003cli\u003eReview form notification settings for any fields configured to use the \u0026quot;Signature\u0026quot; or similar fields that could be abused for file attachment.\u003c/li\u003e\n\u003cli\u003eAudit web server access logs for anomalous POST requests directed at form submission endpoints that result in repeated email notification triggers.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T05:59:22Z","date_published":"2026-11-11T05:59:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-everest-forms-file-read/","summary":"The Everest Forms plugin for WordPress (Pro add-on) contains an arbitrary file read vulnerability that allows unauthenticated attackers to exfiltrate sensitive files by manipulating email notification attachments.","title":"Everest Forms: Arbitrary file read in Pro add-on (CVE-2026-115483)","url":"https://feed.craftedsignal.io/briefs/2026-11-everest-forms-file-read/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:everestforms:everest_forms:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}