EF
Product
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 3Low 0
Watch
Add Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3296 | 9.8 | Apr 8 | Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata Affected: through 3.4.3 |
| CVE-2025-3439 | 9.8 | Apr 11 | Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection Affected: through 3.1.1 |
| CVE-2025-1128 | 9.8 | Feb 25 | Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion Affected: through 3.0.9.4 |
| CVE-2026-5478 | 8.1 | Apr 20 | Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter Affected: through 3.4.4 |
| CVE-2024-1812 | 7.2 | Apr 9 | Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url Affected: through 2.0.7 |
| CVE-2025-3422 | 6.3 | Apr 11 | Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Affected: through 3.1.1 |
| CVE-2025-3421 | 6.1 | Apr 11 | Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting Affected: through 3.1.1 |
| CVE-2026-4888 | 4.3 | May 27 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending Affected: through 3.4.7 |
Showing 8