PT-2026-144586

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach entry files function. This is due to the function attaching any entry field value whose meta key matches /signature / to the notification email after only a file...