VendorsWPEveresteverest_formsany version
Vulnerabilities

WPEverest Everest Forms any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2025-1128
Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion
Published 2025-02-25 · Analyzed
9.8EPSS 0.288
CVE-2019-13575
A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php
Published 2019-07-18 · Modified
9.8EPSS 0.026
CVE-2025-3439
Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection
Published 2025-04-11 · Analyzed
9.8EPSS 0.012
CVE-2025-5927
Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
Published 2025-06-25 · Analyzed
7.5EPSS 0.006
CVE-2024-1812
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Published 2024-04-09 · Modified
7.2EPSS 0.005
CVE-2025-3422
Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Published 2025-04-11 · Analyzed
6.3EPSS 0.003
CVE-2021-24907
Everest Forms < 1.8.0 - Reflected Cross-Site Scripting
Published 2021-12-21 · Modified
6.1EPSS 0.009
CVE-2025-3421
Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting
Published 2025-04-11 · Modified
6.1EPSS 0.004
CVE-2025-26841
Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.
Published 2025-05-12 · Analyzed
6.1EPSS 0.003
CVE-2023-51695
WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-01 · Modified
5.9EPSS 0.003
CVE-2023-51377
WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability
Published 2024-06-14 · Modified
5.3EPSS 0.003
CVE-2024-10471
Everest Forms < 3.0.4.2 - Admin+ Stored XSS
Published 2024-11-26 · Analyzed
4.8EPSS 0.004
CVE-2024-8542
Everest Forms < 3.0.3.1 - Admin+ Stored XSS
Published 2025-05-15 · Analyzed
4.8EPSS 0.003
CVE-2024-13125
Everest Forms < 3.0.8.1 - Admin+ Stored XSS
Published 2025-02-13 · Analyzed
3.5EPSS 0.003