Skip to content
Threat Feed
Subscribe

Product

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder With AI (<= 3.6.2)

1 brief RSS
high advisory

Everest Forms: Unauthenticated file deletion (CVE-2026-120513)

The Everest Forms WordPress plugin is vulnerable to unauthenticated file deletion in the wp-content/uploads directory due to insufficient input validation in the remove_csv_file_after_email_send function.

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI wordpress vulnerability webserver cve-2026-120513
1t 1c