702 matches found
MAL-2025-19942 Malicious code in everest-moose-ayl794-project (npm)
The package everest-moose-ayl794-project was found to contain malicious code...
MAL-2025-17545 Malicious code in coral-everest-ebo861-project (npm)
The package coral-everest-ebo861-project was found to contain malicious code...
MAL-2025-19943 Malicious code in everest-peacock-pmb616-project (npm)
The package everest-peacock-pmb616-project was found to contain malicious code...
MAL-2025-31157 Malicious code in quasar-everest-rzu055-project (npm)
The package quasar-everest-rzu055-project was found to contain malicious code...
MAL-2025-19934 Malicious code in everest-ant-yma980-project (npm)
The package everest-ant-yma980-project was found to contain malicious code...
Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach
Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July...
WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability
WordPress Everest Forms - Frontend Listing plugin = 1.0.5 - PHP Object Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Everest Forms - Frontend Listing versions = 1.0.5...
WordPress Everest Forms Plugin <= 3.2.2 is vulnerable to PHP Object Injection
Software Everest Forms Type Plugin Vulnerable versions = 3.2.2 Fixed in 3.2.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-52709 Patch priority High CVSS severity High 9.8 Developer Everest Forms PSID ed6f018dd59f Credits Phat RiO - BlueRock Required privilege...
CVE-2025-52709
Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms allows Object Injection. This issue affects Everest Forms: from n/a through 3.2.2...
CVE-2025-52709
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-52709
CVE-2025-52709 pertains to the Everest Forms WordPress plugin. The vulnerability is a PHP Object Injection arising from deserialization of untrusted data in Everest Forms versions up to 3.2.2, potentially enabling remote code execution. Everest Forms 3.2.3 and later fix this issue. The Patchstack...
CVE-2025-52709
...
CVE-2025-52709
...
CVE-2025-5927
The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...
PT-2025-27115
Name of the Vulnerable Software and Affected Versions: Everest Forms versions through 3.2.2 Description: Deserialization of untrusted data in Everest Forms allows for object injection. This issue impacts installations with PHP versions below 7.1, potentially leading to remote code execution RCE...
CVE-2025-5927
The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...
CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...
CVE-2025-5927
CVE-2025-5927 affects the Everest Forms (Pro) WordPress plugin up to version 1.9.4, with an insufficiently validated delete_entry_files() path that enables arbitrary file deletion. Multiple sources describe an unauthenticated path traversal leading to deletion of server files (potential remote co...
CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...
CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
The Everest Forms Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteentryfiles function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...