WordPress Plugin Vulnerabilities | Page 76 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

everest-faq-manager-lite

Published

2021-10-13

Title

Backdoored Plugins & Themes from AccessPress Themes

Slug

Published

2019-07-18

Title

Everest Forms < 1.5.0 - SQL Injection

Slug

Published

2021-11-22

Title

Everest Forms < 1.8.0 - Reflected Cross-Site Scripting

Slug

Published

2023-12-27

Title

Everest Forms < 2.0.5 - Admin+ Stored XSS

Slug

Published

2024-03-15

Title

Everest Forms < 2.0.8 - Unauthenticated Server-Side Request Forgery via font_url

Slug

Published

2024-08-01

Title

Everest Forms < 3.0.3.1 - Admin+ Stored XSS

Slug

Published

2024-11-05

Title

Everest Forms < 3.0.4.2 - Admin+ Stored XSS

Slug

Published

2025-01-23

Title

Everest Forms < 3.0.8.1 - Admin+ Stored XSS

Slug

Published

2025-02-17

Title

Everest Forms < 3.0.9.5 - Unauthenticated Arbitrary File Upload, Read, and Deletion

Slug

Published

2025-04-10

Title

Everest Forms < 3.1.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

Slug

Published

2025-04-10

Title

Everest Forms < 3.1.2 - Reflected Cross-Site Scripting

Slug

Published

2025-04-10

Title

Everest Forms < 3.1.2 - Unauthenticated PHP Object Injection

Slug

Published

2025-07-01

Title

Everest Forms < 3.2.3 - Unauthenticated PHP Object Injection

Slug

Published

2026-04-07

Title

Everest Forms < 3.4.4 - Unauthenticated PHP Object Injection via Form Entry Metadata

Slug

Published

2026-04-20

Title

Everest Forms < 3.4.5 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter

Slug

Published

2025-09-26

Title

Everest Forms < 3.4.2 - Unauthenticated Arbitrary Shortcode Execution

Slug

Published

2026-05-27

Title

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder < 3.4.8 - Missing Authorization to Authenticated (Subscriber+) Email Sending

Slug

Published

2026-06-18

Title

Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints

Slug

Published

2026-06-18

Title

Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts

Slug

Published

2026-06-25

Title

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI < 3.5.0 - Reflected Cross-Site Scripting

Slug

Published

2026-08-15

Title

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI < 3.5.3 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints

Slug

Published

2026-08-27

Title

Everest Forms < 3.4.5 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'

Slug

everest-forms-frontend-listing

Published

2025-07-02

Title

Everest Forms - Frontend Listing <= 1.0.5 - Unauthenticated PHP Object Injection

Slug

everest-forms-pro

Published

2025-06-24

Title

Everest Forms (Pro) < 1.9.5 - Unauthenticated Arbitrary File Deletion via Path Traversal

Slug

everest-forms-pro

Published

2025-11-04

Title

Everest Forms (Pro) < 1.9.8 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature