CVE-2026-89101

Everest Forms MCP tools can expose or delete other users’ entries

Everest Forms · Everest Forms MCP tools

First documented disclosure · Review checkpoint

Summary

Form and entry access can cross owners through the MCP interface.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed public sources describe the vulnerability and its conditions. Malicious exploitation has not been established in the reviewed sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The MCP form and entry handlers missed object-level ownership checks.

Conditions required

An authenticated WordPress account needs the plugin’s custom access level or greater.

Potential impact

Another user’s contact submissions, including personal information, may be read or deleted.

Affected versions and configurations

Through 3.6.2.

Fix and mitigation status

Exact first fixed release unverified. CNA lists versions through 3.6.2 as affected.

Practical next steps

Update beyond the CNA’s affected range and verify cross-owner authorization for MCP form and entry tools.

Operating lesson

Enforce ownership on individual objects regardless of the control surface used.

Evidence and limits

Wordfence dates public disclosure of this cross-owner issue to November 5. The September 21 changelog described MCP ownership hardening in 3.6.2, which Wordfence still lists as affected. The first release that fully fixed this finding could not be confirmed.

Sources