Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2025-1128 — AI Deep Analysis Summary

CVSS 9.8 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical code flaw in Everest Forms allows attackers to bypass file type/path validation. 📉 **Consequences**: This leads to **Arbitrary File Upload**, **Read**, and **Delete** operations.…

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type). The plugin fails to properly validate file types and paths during upload processes.…

Q3Who is affected? (Versions/Components)

👥 **Affected**: Users of **Everest Forms** plugin on WordPress. 📦 **Version**: **3.0.9.4 and earlier**. If you haven't updated since Feb 2025, you are at risk! ⚠️ Vendor: wpeverest.

Q4What can hackers do? (Privileges/Data)

🕵️ **Attacker Capabilities**: Hackers can upload malicious scripts (Webshells), read sensitive config files, and delete critical site data.…

Q5Is exploitation threshold high? (Auth/Config)

📊 **Exploitation Threshold**: **LOW**. The CVSS vector shows **AV:N** (Network), **AC:L** (Low Complexity), **PR:N** (No Privileges Required), **UI:N** (No User Interaction).…

Q6Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploit**: Currently, **No** public PoC or wild exploitation code is listed in the provided data. 📭 However, given the low barrier to entry, expect exploits to appear quickly. Don't wait for a PoC to act! ⏳

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan your WordPress plugins for **Everest Forms**. Check the version number in your dashboard. 📋 Look for the file `class-evf-form-fields-upload.php` in the plugin directory.…

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Official Fix**: **Yes**. The vendor has released patches. 🛠️ References show commits and changesets (e.g., PR #1406, Changeset 3237831) addressing the upload class. Update immediately to the latest version! 🔄

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: If you can't update, **disable the plugin** immediately. 🛑 Restrict file upload permissions in your server config (e.g., disable PHP execution in upload folders).…

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. With a CVSS score indicating High impact and no auth required, this is a top-priority fix. 🚨 Patch now to prevent site takeover. Don't risk your data! 🏃‍♂️💨