Advisories · Technology

wpeverest Everest Forms.

Every CVE that names wpeverest Everest Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-62103 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
- wpeverest Everest Forms
- Insecure deserialization
Not analysed yet 11 Sept 2026
CVE-2026-57312 CVE record

CVSS 7.1 High

WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
- wpeverest Everest Forms
- Cross-site scripting (XSS)
Not analysed yet 26 Jun 2026
CVE-2026-22422 CVE record

CVSS 5.3 Medium

WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability
- wpeverest Everest Forms
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2026
CVE-2023-51377 CVE record

CVSS 5.3 Medium

WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability
- WPEverest Everest Forms
- Broken access control
Not analysed yet 14 Jun 2024