{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3awpeveresteverest_formswordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wpeverest:everest_forms:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":8.2,"id":"CVE-2026-120513"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Everest Forms – Contact Form, Payment Form, Quiz, Survey \u0026 Custom Form Builder with AI (\u003c= 3.6.2)"],"_cs_severities":["high"],"_cs_tags":["wordpress","vulnerability","webserver","cve-2026-120513"],"_cs_type":"advisory","_cs_vendors":["WPEverest"],"content_html":"\u003cp\u003eThe Everest Forms plugin (up to version 3.6.2) for WordPress contains a file deletion vulnerability within the remove_csv_file_after_email_send function. An unauthenticated attacker can delete files in the wp-content/uploads directory when the Save-and-Continue addon is active and the \u0026quot;Disable storing entry information\u0026quot; setting is enabled on a specific form. If the deleted file is an .htaccess file, this may permit PHP execution in the uploads directory on affected Apache servers. In limited circumstances, the vulnerability may allow for file deletion outside of the uploads directory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows unauthorized deletion of files, potentially leading to data loss. Security configuration bypass may occur if an .htaccess file controlling security in the uploads directory is removed, enabling PHP execution of uploaded scripts.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Everest Forms plugin to a version later than 3.6.2 immediately.\u003c/li\u003e\n\u003cli\u003eAudit the WordPress uploads directory for unexpected deletion events or missing .htaccess files.\u003c/li\u003e\n\u003cli\u003eDisable the \u0026quot;Save-and-Continue\u0026quot; addon if it is not required until the plugin can be patched.\u003c/li\u003e\n\u003cli\u003eVerify that file system permissions prevent the web server user from deleting critical system files outside of the defined uploads directory.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T08:05:07Z","date_published":"2026-11-10T08:05:07Z","id":"https://feed.craftedsignal.io/briefs/2026-11-everest-forms-file-deletion/","summary":"The Everest Forms WordPress plugin is vulnerable to unauthenticated file deletion in the wp-content/uploads directory due to insufficient input validation in the remove_csv_file_after_email_send function.","title":"Everest Forms: Unauthenticated file deletion (CVE-2026-120513)","url":"https://feed.craftedsignal.io/briefs/2026-11-everest-forms-file-deletion/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:wpeverest:everest_forms:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}