Vendor
The Everest Forms plugin for WordPress (Pro add-on) contains an arbitrary file read vulnerability that allows unauthenticated attackers to exfiltrate sensitive files by manipulating email notification attachments.