PT-2026-83133

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the load previous field value method in class-evf-form-task.php accepting arbitrary URL values from $ POST data for upload fields without domain...