CVE-2026-120513 | WPEverest Everest Forms Plugin up to 3.6.2 on WordPress Save-and-Continue Addon remove_csv_file_after_email_send path traversal

A vulnerability labeled as critical has been found in WPEverest Everest Forms Plugin up to 3.6.2 on WordPress. This vulnerability affects the function remove_csv_file_after_email_send of the component Save-and-Continue Addon. The manipulation results in path traversal.

This vulnerability is known as CVE-2026-120513. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More