Threats tagged 'ghsa-65x7-x9p9-rjjj'

The Everest Forms plugin for WordPress versions up to and including 3.6.3 contains an Arbitrary File Read vulnerability via the attach_entry_files() function. This flaw allows unauthenticated attackers to read arbitrary files on the server by exploiting the way the plugin attaches files to notification emails without proper path validation. Exploitation requires a form with the 'Attach Files' setting enabled and a field with a meta key matching /signature_/, which is provided by the Everest Forms Pro add-on. The vulnerability can lead to disclosure of sensitive files such as wp-config.php.