Login Request a demo
WP
Vendor
wpeverest
14 products with CVEs on record
96
CVEs
0
On KEV
7
New 30D
Products
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
9.9
28 CVEs0 on KEV4 new
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
wpeverest
6.1
4 CVEs0 on KEV2 new
UR
User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin
WPEverest
7.2
2 CVEs0 on KEV1 new
UR
User Registration
wpeverest
9.9
19 CVEs0 on KEV0 new
EF
Everest Forms
wpeverest
9.8
17 CVEs0 on KEV0 new
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
9.8
8 CVEs0 on KEV0 new
UR
User Registration & Membership
Wpeverest
8.8
8 CVEs0 on KEV0 new
EF
Everest Forms Pro
WPEverest
9.8
4 CVEs0 on KEV0 new
CF
Contact Form
Wpeverest
4.9
1 CVEs0 on KEV0 new
EF
Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!
WPEverest
4.8
1 CVEs0 on KEV0 new
EF
Everest Forms - Frontend Listing
wpeverest
9.8
1 CVEs0 on KEV0 new
PD
PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer
wpeverest
5.3
1 CVEs0 on KEV0 new
UR
User Registration Advanced Fields
WPEverest
9.8
1 CVEs0 on KEV0 new
UR
User Registration & Membership Pro
WPEverest
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-91153
New
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
wpeverest
5.3
1%
Oct 29Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})
CVE-2026-91152
New
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
wpeverest
6.1
0%
Oct 29Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter
CVE-2026-92798
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
8.1
0%
Oct 17User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag
CVE-2026-92978
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
4.3
0%
Oct 17User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()
CVE-2026-96660
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
7.2
0%
Oct 17User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value
CVE-2026-87111
UR
User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin
WPEverest
7.2
0%
Oct 16User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header
CVE-2026-15222
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.4
0%
Oct 16User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name
CVE-2026-74017
UR
User Registration
wpeverest
5.3
0%
Sep 17WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
CVE-2026-62103
EF
Everest Forms
wpeverest
9.8
1%
Sep 11WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
CVE-2026-5096
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
wpeverest
5.3
0%
Aug 28Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'
CVE-2026-74001
UR
User Registration & Membership Pro
WPEverest
9.8
1%
Aug 20WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability
CVE-2026-73995
UR
User Registration
wpeverest
5.4
0%
Aug 18WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
CVE-2026-13167
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
wpeverest
4.3
0%
Aug 16Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints
CVE-2026-73403
UR
User Registration
wpeverest
5.3
0%
Aug 13WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability
CVE-2026-12124
PD
PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer
wpeverest
5.3
0%
Jul 28PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameter
CVE-2026-57312
EF
Everest Forms
wpeverest
7.1
0%
Jun 26WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-1869
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
6.5
0%
Jun 26User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass
CVE-2026-7651
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.3
0%
May 28User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter
CVE-2026-4888
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
4.3
0%
May 27Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending
CVE-2026-6145
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.3
0%
May 14User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter
CVE-2026-3601
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
4.3
0%
May 5User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content Modification
CVE-2026-4882
UR
User Registration Advanced Fields
WPEverest
9.8
1%
May 2User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload
CVE-2026-42652
UR
User Registration
wpeverest
7.1
0%
Apr 29WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-5478
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
8.1
1%
Apr 20Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter
CVE-2026-6203
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
6.1
1%
Apr 13User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
CVE-2026-1865
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
6.5
0%
Apr 8User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]
CVE-2026-3296
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
9.8
4%
Apr 8Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata
CVE-2026-3300
EF
Everest Forms Pro
WPEverest
9.8
39%
Mar 31Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field
CVE-2026-32488
UR
User Registration
wpeverest
8.1
0%
Mar 25WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability
CVE-2026-4056
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.4
0%
Mar 23User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation
CVE-2026-27070
EF
Everest Forms Pro
WPEverest
7.1
0%
Mar 19WordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-1492
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
9.8
29%
Mar 3User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
CVE-2026-1779
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
8.1
0%
Feb 26User Registration & Membership <= 5.1.2 - Authentication Bypass
CVE-2026-2356
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.3
0%
Feb 26User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
CVE-2026-22422
EF
Everest Forms
wpeverest
5.3
0%
Feb 19WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability
CVE-2026-24353
UR
User Registration
wpeverest
4.3
0%
Jan 22WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability
CVE-2025-67956
UR
User Registration
wpeverest
8.2
0%
Jan 22WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability
CVE-2025-14976
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.4
0%
Jan 10User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2025-13367
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
6.4
0%
Dec 15User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2025-8871
EF
Everest Forms Pro
WPEverest
5.6
0%
Nov 5Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature
CVE-2025-60210
EF
Everest Forms - Frontend Listing
wpeverest
9.8
1%
Oct 22WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability
CVE-2025-9085
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
4.9
0%
Sep 6User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection
CVE-2025-6831
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
6.4
0%
Jul 22User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode
CVE-2025-5927
EF
Everest Forms Pro
WPEverest
7.5
1%
Jun 25Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
CVE-2024-8542
EF
Everest Forms
Wpeverest
4.8
0%
May 15Everest Forms < 3.0.3.1 - Admin+ Stored XSS
CVE-2025-26841
EF
Everest Forms
Wpeverest
6.1
0%
May 12Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload
CVE-2025-3281
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.3
0%
May 6User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
CVE-2025-39400
UR
User Registration
wpeverest
6.1
0%
Apr 24WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-2594
UR
User Registration & Membership
Wpeverest
8.1
10%
Apr 22User Registration & Membership < 4.1.3 - Authentication Bypass
CVE-2025-3284
UR
User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin
WPEverest
4.3
0%
Apr 19User Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile <= 5.1.3 - Cross-Site Request Forgery to User Deletion
CVE-2025-2563
UR
User Registration & Membership
Wpeverest
8.1
49%
Apr 14User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
CVE-2025-3282
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
5.3
0%
Apr 12User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
CVE-2025-3292
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
4.3
0%
Apr 12User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
CVE-2025-3421
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
6.1
0%
Apr 11Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting
CVE-2025-3422
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
6.3
0%
Apr 11Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
CVE-2025-3439
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
9.8
1%
Apr 11Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection
CVE-2025-30899
UR
User Registration
wpeverest
4.8
0%
Mar 27WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-1511
UR
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
wpeverest
6.1
0%
Feb 28User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting
CVE-2025-1128
EF
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
wpeverest
9.8
42%
Feb 25Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion
CVE-2024-13125
EF
Everest Forms
Wpeverest
3.5
0%
Feb 13Everest Forms < 3.0.8.1 - Admin+ Stored XSS