Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

Уязвимости

• CVE-2026-62103без авторизации≤ 3.6.0

  WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability

  Критич. 9.8

• CVE-2026-3296без авторизации≤ 3.4.3

  Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata

  Критич. 9.8

• CVE-2026-3300без авторизации≤ 1.9.12

  Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

  Критич. 9.8

• CVE-2025-3439без авторизации≤ 3.1.1

  Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection

  Критич. 9.8

• CVE-2025-1128без авторизации≤ 3.0.9.4

  Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

  Критич. 9.8

• CVE-2019-13575без авторизации

  A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9.

  Критич. 9.8

• CVE-2026-5478без авторизации≤ 3.4.4

  Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter

  Высокий 8.1

• CVE-2025-5927без авторизации · нужен клик≤ 1.9.4

  Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

  Высокий 7.5

• CVE-2024-1812без авторизации≤ 2.0.7

  Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url

  Высокий 7.2

• CVE-2026-57312без авторизации · нужен клик≤ 3.4.8

  WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-3421без авторизации · нужен клик≤ 3.1.1

  Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2026-5096без авторизации≤ 3.4.4

  Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'

  Средний 5.3

• CVE-2026-22422без авторизации≤ 3.4.1

  WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability

  Средний 5.3

• CVE-2023-51377без авторизации≤ 2.0.3

  WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2023-51695высокие права≤ 2.0.4.1

  WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2026-13167нужен вход≤ 3.5.2

  Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary

  Средний 4.3

• CVE-2026-4888подписчик+≤ 3.4.7

  Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending

  Средний 4.3