WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
everest-backup
Published
2025-06-05
Title
Everest Backup < 2.3.4 - Cross-Site Request Forgery
Slug
everest-backup
Published
2025-10-10
Title
Everest Backup < 2.3.6 - Missing Authorization to Unauthenticated Information Exposure
Slug
everest-backup
Published
2025-10-10
Title
Everest Backup < 2.3.9 - Missing Authorization
Slug
everest-backup
Published
2025-12-02
Title
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin < 2.3.9 - Missing Authorization to Unauthenticated Backup Failure
Slug
everest-backup
Published
2025-12-31
Title
Everest Backup <= 2.3.9 - Cross-Site Request Forgery
Slug
everest-coming-soon-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-comment-rating-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-counter-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-faq-manager-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-forms
Published
2019-07-18
Title
Everest Forms < 1.5.0 - SQL Injection
Slug
everest-forms
Published
2021-11-22
Title
Everest Forms < 1.8.0 - Reflected Cross-Site Scripting
Slug
everest-forms
Published
2023-12-27
Title
Everest Forms < 2.0.5 - Admin+ Stored XSS
Slug
everest-forms
Published
2024-03-15
Title
Everest Forms < 2.0.8 - Unauthenticated Server-Side Request Forgery via font_url
Slug
everest-forms
Published
2024-08-01
Title
Everest Forms < 3.0.3.1 - Admin+ Stored XSS
Slug
everest-forms
Published
2024-11-05
Title
Everest Forms < 3.0.4.2 - Admin+ Stored XSS
Slug
everest-forms
Published
2025-01-23
Title
Everest Forms < 3.0.8.1 - Admin+ Stored XSS
Slug
everest-forms
Published
2025-02-17
Title
Everest Forms < 3.0.9.5 - Unauthenticated Arbitrary File Upload, Read, and Deletion
Slug
everest-forms
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
everest-forms
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Reflected Cross-Site Scripting
Slug
everest-forms
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Unauthenticated PHP Object Injection
Slug
everest-forms
Published
2025-07-01
Title
Everest Forms < 3.2.3 - Unauthenticated PHP Object Injection
Slug
everest-forms
Published
2026-04-07
Title
Everest Forms < 3.4.4 - Unauthenticated PHP Object Injection via Form Entry Metadata
Slug
everest-forms-frontend-listing
Published
2025-07-02
Title
Everest Forms - Frontend Listing <= 1.0.5 - Unauthenticated PHP Object Injection
Slug
everest-forms-pro
Published
2025-06-24
Title
Everest Forms (Pro) < 1.9.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
Slug
everest-forms-pro
Published
2025-11-04
Title
Everest Forms (Pro) < 1.9.8 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature