CVE-2025-5927 | Everest Forms Pro Plugin up to 1.9.4 on WordPress delete_entry_files path traversal

June 25, 2025 Yanac

A vulnerability, which was classified as critical, was found in Everest Forms Pro Plugin up to 1.9.4 on WordPress. This affects the function delete_entry_files. The manipulation leads to path traversal.

This vulnerability is uniquely identified as CVE-2025-5927. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More