PatchTheCVEeverest forms vulnerabilities and fixes
Recent CVEs affecting everest forms, with upgrade or downgrade steps. 10 tracked.
Also searched as: everestforms.
everest forms has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-06-25. Highest priority: CVE-2025-1128 (score 67/100).
- CVE-2025-5927 HIGH 7.5 UPGRADE The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file
- CVE-2025-3439 CRITICAL 9.8 UPGRADE The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wor
- CVE-2025-3422 MEDIUM 5.4 UPGRADE The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for
- CVE-2025-3421 MEDIUM 6.1 UPGRADE The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wor
- CVE-2025-26841 MEDIUM 6.1 UPGRADE Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbit
- CVE-2025-1128 CRITICAL 9.8 UPGRADE The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wo
- CVE-2024-8542 MEDIUM 4.8 UPGRADE The Everest Forms WordPress plugin before 3.0.3.1 does not sanitise and escape some of its settings, which co
- CVE-2024-13125 LOW 3.5 UPGRADE The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which co
- CVE-2024-10471 MEDIUM 4.8 UPGRADE The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which co
- CVE-2023-51377 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a thro
FAQ
How do I fix everest forms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is everest forms being exploited right now?
None of the tracked everest forms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which everest forms CVE should I patch first?
CVE-2025-1128 currently ranks highest (67/100): The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wo.