Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpeverest

CVE IDTitleCVSSSeverityPublished
CVE-2026-4888 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending CWE-862 4.3 Medium2026-05-27
CVE-2026-5478 Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter CWE-22 8.1 High2026-04-20
CVE-2026-3296 Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata CWE-502 9.8 Critical2026-04-08
CVE-2025-3421 Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2025-04-11
CVE-2025-3439 Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection CWE-502 9.8 Critical2025-04-11
CVE-2025-3422 Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CWE-94 5.4 Medium2025-04-11
CVE-2025-1128 Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion CWE-434 9.8 Critical2025-02-25
CVE-2024-1812 Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url CWE-918 7.2 High2024-04-09

All 8 known CVE vulnerabilities affecting Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with full Chinese analysis, references, and POCs where available.