Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!, CVE-2026-11571

CVE, Research URL: CVE-2026-11571
Home page URL: Security reports for Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!
Application: Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!
Published on: Jul 09, 2026
Research Description: The Everest Forms WordPress plugin before 3.5.0 does not reliably delete temporary CSV files generated during email-notification processing and leaves them publicly accessible in the uploads directory, allowing unauthenticated attackers to retrieve other users' form submission records via predictable, enumerable filenames.
Affected versions: max 3.5.0.
Status: vulnerable