CVE-2026-120513

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the removecsvfileafteremailsend function in all versions up to, and including, 3.6.2 This makes it possible fo...

CVE-2026-120513

The Everest Forms WordPress plugin (versions up to and including 3.6.2 ) is vulnerable to unauthenticated arbitrary file deletion due to insufficient file path validation in the remove_csv_file_after_email_send function. Attackers can delete files within the wp-content/uploads directory, potentia...

CVE-2026-120513: wpeverest: The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is…

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the removecsvfileafteremailsend function in all versions up to, and including, 3.6.2 This makes it possible fo...