agentprime: wpeverest-everest-forms-contact-form-payment-form-quiz-survey-custom-form-buildeEvery new CVE for wpeverest-everest-forms-contact-form-payment-form-quiz-survey-custom-form-builde.https://agentprime.io/CVE-2026-89101: Everest Forms <= 3.6.2 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Entry/Form Disclosure and Deletion via MCP /tools/call JSON-RPC Endpointhttps://agentprime.io/advisories/CVE-2026-89101/https://agentprime.io/advisories/CVE-2026-89101/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 11:17:35 GMTCVECVE-2026-91153: Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})https://agentprime.io/advisories/CVE-2026-91153/https://agentprime.io/advisories/CVE-2026-91153/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:25:36 GMTCVECVE-2026-91152: Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameterhttps://agentprime.io/advisories/CVE-2026-91152/https://agentprime.io/advisories/CVE-2026-91152/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:25:34 GMTCVECVE-2026-5096: Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'https://agentprime.io/advisories/CVE-2026-5096/https://agentprime.io/advisories/CVE-2026-5096/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 11:29:29 GMTCVECVE-2026-13167: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX…https://agentprime.io/advisories/CVE-2026-13167/https://agentprime.io/advisories/CVE-2026-13167/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 04:24:54 GMTCVECVE-2026-4888: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sendinghttps://agentprime.io/advisories/CVE-2026-4888/https://agentprime.io/advisories/CVE-2026-4888/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 23:26:34 GMTCVECVE-2026-5478: Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameterhttps://agentprime.io/advisories/CVE-2026-5478/https://agentprime.io/advisories/CVE-2026-5478/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 19:27:08 GMTCVECVE-2026-3296: Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadatahttps://agentprime.io/advisories/CVE-2026-3296/https://agentprime.io/advisories/CVE-2026-3296/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 01:24:43 GMTCVEcriticalCVE-2025-3421: Everest Forms <= 3.1.1 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-3421/https://agentprime.io/advisories/CVE-2025-3421/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Apr 2025 12:42:24 GMTCVECVE-2025-3422: Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2025-3422/https://agentprime.io/advisories/CVE-2025-3422/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Apr 2025 12:42:24 GMTCVECVE-2025-3439: Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injectionhttps://agentprime.io/advisories/CVE-2025-3439/https://agentprime.io/advisories/CVE-2025-3439/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Apr 2025 12:42:23 GMTCVEcriticalCVE-2025-1128: Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletionhttps://agentprime.io/advisories/CVE-2025-1128/https://agentprime.io/advisories/CVE-2025-1128/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.42 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 06:58:31 GMTCVEcriticalCVE-2024-1812: Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_urlhttps://agentprime.io/advisories/CVE-2024-1812/https://agentprime.io/advisories/CVE-2024-1812/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:24 GMTCVE