726 matches found
CVE-2022-39959
CVE-2022-39959 Fournisseur concerné - Panini https://www.panini.com/en Produit concerné - Panini Everest Engine Version concernée - 2.0.4 Il existe un chemin de service non cité dans Everest Engine EverestEngine.exe dans la version 2.0.4 sous Windows. Cela permet à un utilisateur local non autori...
CVE-2026-3300
CVE-2026-3300 - Everest Forms Pro Nicht authentifiziertes gespeichertes Cross-Site-Scripting Schnelle Nutzung root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Hinweise zur Ausnutzung Schweregrad: KRITISCH CVSS: 9.8 Auswirkungen: Vertraulichkeit,...
everest-backup-cve-2025-11380
CVE-2025-11380 Codice proof of concept per CVE-2025-11380 - accesso non autenticato ai backup nel plugin WordPress Everest Backup. Link al post del blog in arrivo...
CVE-2026-3296
CVE-2026-3296 CVE-2026-3296 è una vulnerabilità critica di PHP Object Injection non autenticata CVSS 9.8 nel plugin WordPress Everest Forms. CVE-2026-3296 — Scanner per PHP Object Injection in Everest Forms Plugin: Everest Forms – Modulo di contatto, modulo di pagamento, quiz, sondaggio e builder...
Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's native unserialize on stored entry meta...
Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection
The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...
CVE-2026-13158
CVE-2026-13158: Everest Toolkit = 1.2.3 — Beliebiger Datei-Upload Admin+ zur Remote-Code-Ausführung RCE 📖 Übersicht zum Advisory CVE-2026-13158 ist eine authentifizierte Schwachstelle für beliebige Datei-Uploads Admin+, die das WordPress-Plugin Everest Toolkit bis einschließlich Version 1.2.3...
CVE-2026-13167
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
CVE-2026-13167
The CVE concerns the Everest Forms WordPress plugin (Contact/Payment Form, Quiz, Survey & Custom Form Builder with AI) with authorization bypass in all versions up to 3.5.2. The root cause is inadequate verification of a user’s authorization to perform actions, enabling authenticated attackers wi...
CVE-2026-13167 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
EUVD-2026-59862
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
CVE-2026-13167
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
PT-2026-73083
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
CVE-2026-66472 WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
EUVD-2026-57890
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
CVE-2026-66472
CVE-2026-66472 affects the WordPress Everest Backup plugin up to version 2.3.12, with an unauthenticated SQL injection vulnerability reported. The connected sources confirm the affected product (Everest Backup plugin) and the vulnerability class (SQL injection) but do not provide technical detail...
CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
