Everest Forms – Build Contact Forms, Surveys, Polls, Quizzes, Newsletter & Application Forms, and Many More with Ease!

Information

Software Type Plugin
Software Slug everest-forms (view on wordpress.org)
Software Status Active
Software Author wpeverest
Software Website everestforms.net
Software Downloads 6,086,745
Software Active Installs 100,000
Software Record Last Updated October 29, 2024

6 Vulnerabilities

Title Status CVE ID CVSS Researchers Date
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-8542 4.4 Dmitrii Ignatyev August 1, 2024
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url Patched CVE-2024-1812 7.2 hir0ot March 15, 2024
Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2023-51695 4.4 Robert DeVore December 27, 2023
Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms Patched CVE-2023-51377 5.3 Revan Arifio December 26, 2023
Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting Patched CVE-2021-24907 6.1 ZhongFu Su November 22, 2021
Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection Patched CVE-2019-13575 9.8 Tin Duong July 18, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation