Everest Forms Pro vulnerabilities | LiveThreat CVE Feed

Product

Everest Forms Pro

by WPEverest · last CVE Mar 31, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 2Medium 1Low 0

Severity

Exploitation

Watch

Add Everest Forms Pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-5927	7.5	1%	Jun 25	Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion Affected: through 1.9.4
CVE-2026-27070	7.1	0%	Mar 19	WordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerability Affected: through 1.9.10