Login Request a demo
EF
Product
Everest Forms
by wpeverest · last CVE Sep 11, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 4High 3Medium 9Low 1
Severity
All severities17Critical4High3Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Everest Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-3422
6.3
0%
Apr 11
Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Affected: before 3.1.2
CVE-2025-26841
6.1
0%
May 12
Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload
Affected: before 3.0.9
CVE-2025-3421
6.1
0%
Apr 11
Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting
Affected: before 3.1.2
CVE-2021-24907
6.1
1%
Dec 21
Everest Forms < 1.8.0 - Reflected Cross-Site Scripting
Affected: before 1.8.0
CVE-2026-22422
5.3
0%
Feb 19
WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability
Affected: through 3.4.1
CVE-2023-51377
5.3
0%
Jun 14
WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability
Affected: through 2.0.3
CVE-2024-8542
4.8
0%
May 15
Everest Forms < 3.0.3.1 - Admin+ Stored XSS
Affected: before 3.0.3.1
CVE-2024-10471
4.8
0%
Nov 26
Everest Forms < 3.0.4.2 - Admin+ Stored XSS
Affected: before 3.0.4.2
CVE-2023-51695
4.8
0%
Feb 1
WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)
Affected: through 2.0.4.1
Showing 9