CVE-2025-5927

< 1.9.5

The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in

7.5HIGH

CVE-2024-8542

< 3.0.3.1

The Everest Forms WordPress plugin before 3.0.3.1 does not sanitise and escape some of its settings, which could allow high privi

4.8MEDIUM

CVE-2025-26841

< 3.0.9

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file

6.1MEDIUM

CVE-2025-3439

< 3.1.2

The Everest Forms - Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable

9.8CRITICAL

CVE-2025-3422

< 3.1.2

The Everest Forms - Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulner

5.4MEDIUM

CVE-2025-3421

< 3.1.2

The Everest Forms - Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable

6.1MEDIUM

CVE-2025-1128

< 3.0.9.5

The Everest Forms - Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerabl

9.8CRITICAL

CVE-2024-13125

< 3.0.8.1

The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow high privi

3.5LOW

CVE-2024-10471

< 3.0.4.2

The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which could allow high privi

4.8MEDIUM

CVE-2023-51377

< 2.0.3.1

Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.

5.3MEDIUM

CVE-2024-1812

< 2.0.8

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.7 vi

7.2HIGH

CVE-2023-51695

<= 2.0.4.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms - Bu

5.9MEDIUM

CVE-2021-24907

< 1.8.0

The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter before outputt

6.1MEDIUM

CVE-2019-13575

<= 1.4.9

A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of thi

9.8CRITICAL