Wpeverest
Vulnerability activity for Wpeverest: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.3MediumOct 29, 2026Wpeverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI Information disclosureCVE-2026-91153The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the process. This makes it possible for unauthenticated attackers to extract arbitrary WordPress post meta values — including license keys, API tokens, SMTP credentials, and Stripe or AWS secrets stored on any post type — via form submission notification emails or stored entries. The submiss
- 6.1MediumOct 29, 2026Wpeverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI XSSCVE-2026-91152The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'evf_toast_type' parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Ex
- 7.1HighJun 26, 2026Wpeverest Everest Forms XSSCVE-2026-57312Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.
- 7.1HighApr 29, 2026Wpeverest User Registration XSSCVE-2026-42652Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Registration: from n/a through <= 5.1.5.
Top products
- Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI2 CVEs in the last year
- User Registration1 CVE in the last year
- Everest Forms1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.