ever_accounting vulnerabilities

CVEs whose affected-version data names the ever_accounting package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118045High· 8.7

yesterday

Ever Accounting < 2.3.3 - Accounting Manager+ Arbitrary File Deletion via CSV Import

The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplied to its CSV import routine to an allowed directory, allowing users with its custom Accounting Manager role (which does not have administrator priv…

▾ TwilightEPSS 0.31%via CVEORG