Everest Forms Plugin Exposes Over 100,000 WordPress Sites to Complete Takeover

The consequences of this vulnerability are dire. Attackers can upload malicious PHP code to the WordPress uploads folder, which is publicly accessible, enabling them to execute arbitrary code on the server.