CyberRota
← Ana sayfaya dön

CVE-2026-4888

MEDIUM · CVSS 4.3 EPSS %0.27

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-28T00:16:43.797 · Çekilme zamanı: 2026-06-25T12:12:33.830659+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-4888
Severity
MEDIUM
CVSS
4.3
EPSS
%0.27
WordPress

Orijinal NVD Açıklaması

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_email() function in all versions up to, and including, 3.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to send test emails to arbitrary addresses from the server.