MAL-2025-14952 Malicious code in asteroid-everest-dok969-project (npm)

The package asteroid-everest-dok969-project was found to contain malicious code...

MAL-2025-17545 Malicious code in coral-everest-ebo861-project (npm)

The package coral-everest-ebo861-project was found to contain malicious code...

MAL-2025-24872 Malicious code in labyrinth-everest-rgd440-project (npm)

The package labyrinth-everest-rgd440-project was found to contain malicious code...

Malicious code in cascade-everest-kem974-project (npm)

The package cascade-everest-kem974-project was found to contain malicious code...

Malicious code in everest-yak-utk814-project (npm)

The package everest-yak-utk814-project was found to contain malicious code...

Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach

Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July...

WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability

WordPress Everest Forms - Frontend Listing plugin = 1.0.5 - PHP Object Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Everest Forms - Frontend Listing versions = 1.0.5...

WordPress Everest Forms Plugin <= 3.2.2 is vulnerable to PHP Object Injection

Software Everest Forms Type Plugin Vulnerable versions = 3.2.2 Fixed in 3.2.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-52709 Patch priority High CVSS severity High 9.8 Developer Everest Forms PSID ed6f018dd59f Credits Phat RiO - BlueRock Required privilege...

CVE-2025-52709

Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms allows Object Injection. This issue affects Everest Forms: from n/a through 3.2.2...

CVE-2025-52709

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-52709

CVE-2025-52709 pertains to the Everest Forms WordPress plugin. The vulnerability is a PHP Object Injection arising from deserialization of untrusted data in Everest Forms versions up to 3.2.2, potentially enabling remote code execution. Everest Forms 3.2.3 and later fix this issue. The Patchstack...

CVE-2025-52709

...

CVE-2025-52709

...

CVE-2025-5927

The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...

PT-2025-27115

Name of the Vulnerable Software and Affected Versions: Everest Forms versions through 3.2.2 Description: Deserialization of untrusted data in Everest Forms allows for object injection. This issue impacts installations with PHP versions below 7.1, potentially leading to remote code execution RCE...

CVE-2025-5927

The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...

CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...

CVE-2025-5927

CVE-2025-5927 affects the Everest Forms (Pro) WordPress plugin up to version 1.9.4, with an insufficiently validated delete_entry_files() path that enables arbitrary file deletion. Multiple sources describe an unauthenticated path traversal leading to deletion of server files (potential remote co...

CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...

CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...