Threats tagged 'ghsa-fxv3-f72x-7c27'

The Everest Forms plugin for WordPress versions up to and including 3.6.2 suffers from a sensitive information exposure vulnerability. Unauthenticated attackers can exploit this flaw to extract arbitrary WordPress post meta values, such as license keys, API tokens, SMTP credentials, and secrets related to Stripe or AWS. This is possible because the submission nonce is publicly available in every embedded form and can also be generated anonymously via a specific action, requiring no authentication.