CVE-2026-115483 Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_files

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attachentryfiles function. This is due to the function attaching any entry field value whose meta key matches /signature/ to the notification email after only a fileexis...

PT-2026-144586

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach entry files function. This is due to the function attaching any entry field value whose meta key matches /signature / to the notification email after only a file...