Security Risk Category

csv-exposure Security Risks

Published vulnerability pages connected to csv-exposure. One risk can appear in multiple categories while keeping one canonical page.

csv-exposure risks

Showing 1 of 1 published risks.

high

Everest Forms Public Temporary CSV Exposure Vulnerability

The Everest Forms WordPress plugin before 3.5.0 does not reliably delete temporary CSV files generated during email-notification processing and leaves them publicly accessible in the uploads directory, allowing unauthenticated attackers to retrieve other users' form submission records via predictable, enumerable filenames.

CVE-2026-11571wordpresseverest-formsinformation-disclosurecsv-exposure

Updated Jul 10, 2026