Advisories · Technology
Everest Forms.
Every CVE that names Everest Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Everest Forms plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability
- Everest Forms
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Everest Forms plugin <= 3.6.3 - Broken Access Control vulnerability
- Everest Forms
- Broken access control
- CVSS 7.1 High
WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability
- Everest Forms
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability
- Everest Forms
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints
- Everest Forms
- CVSS 7.5 High
Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts
- Everest Forms
- CVSS 4.8 Medium
Everest Forms < 3.0.3.1 - Admin+ Stored XSS
- Everest Forms
- CVSS 3.5 Low
Everest Forms < 3.0.8.1 - Admin+ Stored XSS
- Everest Forms
- CVSS 4.8 Medium
Everest Forms < 3.0.4.2 - Admin+ Stored XSS
- Everest Forms