Known vulnerabilities in Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
AI form builder for WordPress. Build contact forms, payment forms, quiz, survey & conversational forms with built-in AI or drag & drop builder.
23Reported vulnerabilities
9.8Highest CVSS score
3.6.0Latest version
90,000+Active installs
What to do now
Update Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI to 3.4.5 or later.
23 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2026-3300 | Critical | 39.2% | 0 to 1.9.12 (inclusive) | 1.9.13 |
March 31, 2026 |
| CVE-2025-1128 | Critical | 28.8% | Before 3.0.9.5 | 3.0.9.5 |
February 25, 2025 |
| CVE-2026-3296 | Critical | 3.5% | 0 to 3.4.3 (inclusive) | 3.4.4 |
April 8, 2026 |
| CVE-2019-13575 | Critical | 2.6% | 1.4.9 and earlier | 1.5.0 |
July 18, 2019 |
| CVE-2021-24907 | Medium | 0.9% | Before 1.8.0 | 1.8.0 |
December 21, 2021 |
| CVE-2025-3439 | Critical | 1.1% | Before 3.1.2 | 3.1.2 |
April 11, 2025 |
| CVE-2024-8542 | Medium | 0.3% | Before 3.0.3.1 | 3.0.3.1 |
May 15, 2025 |
| CVE-2024-10471 | Medium | 0.4% | Before 3.0.4.2 | 3.0.4.2 |
November 26, 2024 |
| CVE-2026-5478 | High | 1.0% | 0 to 3.4.4 (inclusive) | 3.4.5 |
April 20, 2026 |
| CVE-2025-5927 | High | 0.6% | Before 1.9.5 | 1.9.5 |
June 25, 2025 |
| CVE-2024-13125 | Low | 0.3% | Before 3.0.8.1 | 3.0.8.1 |
February 13, 2025 |
| CVE-2024-1812 | High | 0.5% | Before 2.0.8 | 2.0.8 |
April 9, 2024 |
| CVE-2026-22422 | Medium | 0.2% | 3.4.1 and earlier | 3.4.2 |
September 26, 2025 |
| CVE-2025-3422 | Medium | 0.3% | Before 3.1.2 | 3.1.2 |
April 11, 2025 |
| CVE-2026-57312 | Medium | 0.3% | 3.4.8 and earlier | 3.5.0 |
June 25, 2026 |
| CVE-2025-3421 | Medium | 0.3% | Before 3.1.2 | 3.1.2 |
April 11, 2025 |
| CVE-2026-5096 | Medium | 0.3% | 0 to 3.4.4 (inclusive) | 3.4.5 |
August 28, 2026 |
| CVE-2026-11571 | Medium | 0.4% | 3.4.0 and earlier | 3.5.0 |
June 18, 2026 |
| CVE-2026-12270 | Medium | 0.3% | 3.4.0 and earlier | 3.5.0 |
June 18, 2026 |
| CVE-2023-51377 | Medium | 0.3% | 2.0.3 and earlier | 2.0.3.1 |
December 26, 2023 |
| CVE-2023-51695 | Medium | 0.3% | 2.0.4.1 and earlier | 2.0.5 |
December 27, 2023 |
| CVE-2026-13167 | Medium | 0.3% | 0 to 3.5.2 (inclusive) | 3.5.3 |
August 16, 2026 |
| CVE-2026-4888 | Medium | 0.3% | 0 to 3.4.7 (inclusive) | 3.4.8 |
May 28, 2026 |