Ever Accounting vulnerabilities
We track 1 vulnerability in Ever Accounting products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Ever Accounting vulnerabilities
- 8.7 High severity
Ever Accounting: External Control of File Name or Path
The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplied to its CSV import routine to an allowed directory, allowing users with its custom Accounting Manager role (which does not have administrator privileges) to delete arbitr