Plugin icon

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

everest-forms

Vulnerabilities:

12

Last Updated:

February 19, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-07-01
Title
Everest Forms < 3.2.3 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.2.3
CVSS
8.1 (high)
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Fixed in
Fixed in 3.1.2
CVSS
5.4 (medium)
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.1.2
CVSS
8.1 (high)
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.1.2
CVSS
6.1 (medium)
Published
2025-02-17
Title
Everest Forms < 3.0.9.5 - Unauthenticated Arbitrary File Upload, Read, and Deletion
Fixed in
Fixed in 3.0.9.5
CVSS
9.8 (critical)
Published
2025-01-23
Title
Everest Forms < 3.0.8.1 - Admin+ Stored XSS
Fixed in
Fixed in 3.0.8.1
CVSS
3.5 (low)
Published
2024-11-05
Title
Everest Forms < 3.0.4.2 - Admin+ Stored XSS
Fixed in
Fixed in 3.0.4.2
CVSS
3.5 (low)
Published
2024-08-01
Title
Everest Forms < 3.0.3.1 - Admin+ Stored XSS
Fixed in
Fixed in 3.0.3.1
CVSS
3.5 (low)
Published
2024-03-15
Title
Everest Forms < 2.0.8 - Unauthenticated Server-Side Request Forgery via font_url
Fixed in
Fixed in 2.0.8
CVSS
7.2 (high)
Published
2023-12-27
Title
Everest Forms < 2.0.5 - Admin+ Stored XSS
Fixed in
Fixed in 2.0.5
CVSS
3.1 (low)
Published
2021-11-22
Title
Everest Forms < 1.8.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.8.0
CVSS
6.4 (medium)
Published
2019-07-18
Title
Everest Forms < 1.5.0 - SQL Injection
Fixed in
Fixed in 1.5.0
CVSS
9.8 (critical)