PatchTheCVEwpeverest vulnerabilities
Recent CVEs affecting wpeverest products. 19 tracked.
wpeverest has 19 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 19. Most recent: 2025-06-25. Highest priority: CVE-2025-1128 (score 67/100).
- CVE-2025-5927 HIGH 7.5 UPGRADE The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file
- CVE-2025-3439 CRITICAL 9.8 UPGRADE The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wor
- CVE-2025-3422 MEDIUM 5.4 UPGRADE The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for
- CVE-2025-3421 MEDIUM 6.1 UPGRADE The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wor
- CVE-2025-3292 MEDIUM 4.3 UPGRADE The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPre
- CVE-2025-3282 MEDIUM 5.3 UPGRADE The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPre
- CVE-2025-39400 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeveres
- CVE-2025-30899 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeveres
- CVE-2025-2594 HIGH 8.1 UPGRADE The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX ac
- CVE-2025-2563 HIGH 8.1 UPGRADE The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account
- CVE-2025-26841 MEDIUM 6.1 UPGRADE Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbit
- CVE-2025-1511 MEDIUM 6.1 UPGRADE The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPre
- CVE-2025-1128 CRITICAL 9.8 UPGRADE The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wo
- CVE-2024-8542 MEDIUM 4.8 UPGRADE The Everest Forms WordPress plugin before 3.0.3.1 does not sanitise and escape some of its settings, which co
- CVE-2024-1812 HIGH 7.2 UPGRADE The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and
- CVE-2024-13125 LOW 3.5 UPGRADE The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which co
- CVE-2024-10471 MEDIUM 4.8 UPGRADE The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which co
- CVE-2023-51377 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a thro
- CVE-2023-29429 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Ac
FAQ
How do I fix wpeverest vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpeverest being exploited right now?
None of the tracked wpeverest CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpeverest CVE should I patch first?
CVE-2025-1128 currently ranks highest (67/100): The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for Wo.