EF
Product
Everest Forms
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 9Low 1
Watch
Add Everest Forms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-62103 | 9.8 | Sep 11 | WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability Affected: through 3.6.0 |
| CVE-2025-3439 | 9.8 | Apr 11 | Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection Affected: before 3.1.2 |
| CVE-2025-1128 | 9.8 | Feb 25 | Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion Affected: before 3.0.9.5 |
| CVE-2019-13575 | 9.8 | Jul 18 | A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9 Affected: through 1.4.9 |
| CVE-2025-5927 | 7.5 | Jun 25 | Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion Affected: before 1.9.5 |
| CVE-2024-1812 | 7.2 | Apr 9 | Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url Affected: before 2.0.8 |
| CVE-2026-57312 | 7.1 | Jun 26 | WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.4.8 |
| CVE-2025-3422 | 6.3 | Apr 11 | Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Affected: before 3.1.2 |
| CVE-2025-26841 | 6.1 | May 12 | Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload Affected: before 3.0.9 |
| CVE-2025-3421 | 6.1 | Apr 11 | Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting Affected: before 3.1.2 |
| CVE-2021-24907 | 6.1 | Dec 21 | Everest Forms < 1.8.0 - Reflected Cross-Site Scripting Affected: before 1.8.0 |
| CVE-2026-22422 | 5.3 | Feb 19 | WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability Affected: through 3.4.1 |
| CVE-2023-51377 | 5.3 | Jun 14 | WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability Affected: through 2.0.3 |
| CVE-2024-8542 | 4.8 | May 15 | Everest Forms < 3.0.3.1 - Admin+ Stored XSS Affected: before 3.0.3.1 |
| CVE-2024-10471 | 4.8 | Nov 26 | Everest Forms < 3.0.4.2 - Admin+ Stored XSS Affected: before 3.0.4.2 |
| CVE-2023-51695 | 4.8 | Feb 1 | WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS) Affected: through 2.0.4.1 |
| CVE-2024-13125 | 3.5 | Feb 13 | Everest Forms < 3.0.8.1 - Admin+ Stored XSS Affected: before 3.0.8.1 |
Showing 17