CVE-2026-3300

The CVE-2026-3300 entry applies to the Everest Forms Pro WordPress plugin. Affected component: Calculation Addon’s process_filter() function, which concatenates user-supplied form field values into a PHP code string and passes it to eval() without proper escaping. Root cause: insufficient escapin...