CVE-2026-11571

The Everest Forms WordPress plugin, in versions before 3.5.0 , is vulnerable to unauthenticated sensitive information exposure . The plugin fails to reliably delete temporary CSV files generated during email-notification processing, leaving them publicly accessible within the uploads directory . ...

PT-2026-56698

The Everest Forms WordPress plugin before 3.5.0 does not reliably delete temporary CSV files generated during email-notification processing and leaves them publicly accessible in the uploads directory, allowing unauthenticated attackers to retrieve other users' form submission records via...

Admidio 安全漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A security vulnerability exists in Admidio versions prior to 4.2.9 that stems from improper neutralization of formula elements in C...

PT-2020-14813 · Philips · Patient Information Center Ix

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 Description: The software saves user-provided information into a comma-separated value CSV file, but it does not neutralize or incorrectly neutralizes special elements that could b...