Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

Vulnerabilities 17Slug everest-formsLatest version 3.4.7WordPress.org →

Minimum safe version

3.4.5

Update to 3.4.5 or later to address 17 fixable vulnerabilities

Latest available3.4.7 ✓
N/A
2026-04-07< 3.4.4

Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata

WordfenceCVE
Medium 6.1
2025-05-12< 3.0.9

CVE-2025-26841

CVEEUVD
Medium 6.1
2025-04-11< 3.1.2

Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting

EUVDWordfenceCVE
Medium 5.4
2025-04-11< 3.1.2

Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

EUVDWordfenceCVE
Critical 9.8
2025-04-11< 3.1.2

Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection

EUVDWordfenceCVE
Critical 9.8
2025-02-25< 3.0.9.5

Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

EUVDWordfenceCVE
Medium 4.8
2025-05-15< 3.0.3.1

Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 5.3
2024-12-26< 2.0.3.1

WordPress Everest Forms Plugin <= 2.0.3 is vulnerable to Broken Access Control

PatchstackCVEWordfence
Medium 5.9
2024-12-27< 2.0.5

WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan