İçeriğe atla
Noroxi

wpeverest kayıtları

wpeverest üreticisine ait 33 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3
Pre-auth RCE
4
Düzeltme kaydı olan
%39,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

33 kayıt
  • CVE-2025-1128
    48Planlayın

    Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

    KritikCVSS 9,8İstismar yokEPSS %29

    wpeverest · everest forms25 Şub 2025

  • CVE-2025-2563
    47Planlayın

    User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation

    YüksekCVSS 8,1SilahlaştırılmışEPSS %49

    wpeverest · user registration \& membership14 Nis 2025

  • CVE-2019-13575
    40Planlayın

    A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9.

    KritikCVSS 9,8İstismar yokEPSS %3

    wpeverest · everest forms18 Tem 2019

  • CVE-2023-3342
    40Planlayın

    User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload

    KritikCVSS 9,9İstismar yokEPSS %2

    wpeverest · user registration12 Tem 2023

  • CVE-2025-3439
    39İzleyin

    Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    wpeverest · everest forms11 Nis 2025

  • CVE-2025-60210
    39İzleyin

    WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    wpeverest · everest forms frontend listing22 Eki 2025

  • CVE-2025-2594
    35İzleyin

    User Registration & Membership < 4.1.3 - Authentication Bypass

    YüksekCVSS 8,1Kavram kanıtıEPSS %9

    wpeverest · user registration \& membership22 Nis 2025

  • CVE-2023-3343
    35İzleyin

    User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpeverest · user registration12 Tem 2023

  • CVE-2024-2417
    35İzleyin

    User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Priv

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder2 May 2024

  • CVE-2023-27459
    35İzleyin

    WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpeverest · user registration \& membership26 Mar 2024

  • CVE-2022-3912
    30İzleyin

    User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload

    YüksekCVSS 7,5İstismar yokEPSS %1

    wpeverest · user registration12 Ara 2022

  • CVE-2025-5927
    30İzleyin

    Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

    YüksekCVSS 7,5İstismar yokEPSS %1

    wpeverest · everest forms25 Haz 2025

  • CVE-2024-1812
    28İzleyin

    Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url

    YüksekCVSS 7,2İstismar yokEPSS %1

    wpeverest · everest forms9 Nis 2024

  • CVE-2025-3422
    25İzleyin

    Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

    OrtaCVSS 6,3İstismar yokEPSS %0

    wpeverest · everest forms11 Nis 2025

  • CVE-2021-24907
    24İzleyin

    Everest Forms < 1.8.0 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    wpeverest · everest forms21 Ara 2021

  • CVE-2024-1720
    24İzleyin

    User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    wpeverest · user registration \& membership7 Mar 2024

  • CVE-2025-3421
    24İzleyin

    Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpeverest · everest forms11 Nis 2025

  • CVE-2025-1511
    24İzleyin

    User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpeverest · user registration28 Şub 2025

  • CVE-2025-39400
    24İzleyin

    WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpeverest · user registration \& membership24 Nis 2025

  • CVE-2025-26841
    24İzleyin

    Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpeverest · everest forms12 May 2025

  • CVE-2021-24654
    21İzleyin

    User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    wpeverest · user registration4 Eki 2021

  • CVE-2023-29429
    21İzleyin

    WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    wpeverest · user registration9 Ara 2024

  • CVE-2023-51377
    21İzleyin

    WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    wpeverest · everest forms14 Haz 2024

  • CVE-2025-3282
    21İzleyin

    User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membershi

    OrtaCVSS 5,3İstismar yokEPSS %0

    wpeverest · user registration \& membership12 Nis 2025

  • CVE-2021-24689
    19İzleyin

    Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read

    OrtaCVSS 4,9İstismar yokEPSS %1

    wpeverest · contact form28 Şub 2022