Product by WPEverest

    Everest Forms Pro

    4 known vulnerabilities in Everest Forms Pro (WPEverest), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Everest Forms Pro (WPEverest)
    CriticalCVE-2026-3300

    Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

    		9.8
    HighCVE-2025-5927

    Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion

    also in 1 other product

    		7.5
    HighCVE-2026-27070

    WordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-8871

    WPEverest Everest Forms Pro: Deserialization of Untrusted Data

    		5.6

    News

    All products by WPEverest