Everest Forms WordPress Plugin Shortcode Execution Vulnerability

A vulnerability allowing arbitrary shortcode execution has been identified in the Everest Forms WordPress plugin, in all versions through 3.1.1. This issue arises because the plugin does not properly validate user input before executing shortcodes, allowing authenticated attackers with Subscriber-level access or higher to execute arbitrary shortcodes.

Impact

Exploitation of this vulnerability could lead to unauthorized shortcode execution, potentially allowing attackers to execute malicious code or actions on behalf of the user.

Remediation

Users are advised to update the Everest Forms WordPress plugin to version 3.1.2 or later.