Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

Güvenlik açıkları

• CVE-2026-62103kimlik doğrulamasız≤ 3.6.0

  WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2026-3296kimlik doğrulamasız≤ 3.4.3

  Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata

  Kritik 9.8

• CVE-2026-3300kimlik doğrulamasız≤ 1.9.12

  Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

  Kritik 9.8

• CVE-2025-3439kimlik doğrulamasız≤ 3.1.1

  Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection

  Kritik 9.8

• CVE-2025-1128kimlik doğrulamasız≤ 3.0.9.4

  Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

  Kritik 9.8

• CVE-2019-13575kimlik doğrulamasız

  A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9.

  Kritik 9.8

• CVE-2026-5478kimlik doğrulamasız≤ 3.4.4

  Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter

  Yüksek 8.1

• CVE-2025-5927kimlik doğrulamasız · tıklama gerekir≤ 1.9.4

  Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

  Yüksek 7.5

• CVE-2024-1812kimlik doğrulamasız≤ 2.0.7

  Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url

  Yüksek 7.2

• CVE-2026-57312kimlik doğrulamasız · tıklama gerekir≤ 3.4.8

  WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-3421kimlik doğrulamasız · tıklama gerekir≤ 3.1.1

  Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2026-5096kimlik doğrulamasız≤ 3.4.4

  Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'

  Orta 5.3

• CVE-2026-22422kimlik doğrulamasız≤ 3.4.1

  WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability

  Orta 5.3

• CVE-2023-51377kimlik doğrulamasız≤ 2.0.3

  WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2023-51695yüksek yetki≤ 2.0.4.1

  WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2026-13167giriş gerekir≤ 3.5.2

  Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary

  Orta 4.3

• CVE-2026-4888abone+≤ 3.4.7

  Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending

  Orta 4.3