CVE-2024-1812: 
WordPress vulnerability analysis and mitigation

An Unauthenticated Server-Side Request Forgery (SSRF) vulnerability was discovered in Everest Forms WordPress plugin versions before 2.0.8. The vulnerability exists in the 'font_url' parameter, allowing unauthenticated attackers to make web requests to arbitrary locations originating from the vulnerable server (WPScan).

The vulnerability is classified as a Server-Side Request Forgery (SSRF) issue that affects the font_url parameter handling in Everest Forms. This security flaw enables unauthenticated attackers to initiate server-side requests to arbitrary destinations, potentially bypassing security controls (NVD).

The vulnerability allows attackers to make unauthorized web requests from the affected server, which could potentially lead to internal network scanning, data exfiltration, or bypassing network security controls (WPScan).

The vulnerability can be exploited by unauthenticated attackers, making it particularly concerning as no authentication is required to execute the attack (NVD).

Users are advised to update to Everest Forms version 2.0.8 or later, which contains the fix for this vulnerability (WPScan).