Read the docs

Everest Forms

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Everest Forms records in CISA KEV

No Everest Forms vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-74725 CVE-2026-108491

Stored cross-site scripting in WordPress Everest Forms plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This issue affects Everest Forms: from n/a through 3.6.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-15 No fix listed CWE-79
TI-2026-69249 CVE-2026-94670 · GHSA-w525-c4vq-qxjw

Reflected cross-site scripting in WordPress Everest Forms plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-07 No fix listed CWE-79
TI-2026-86524 CVE-2026-120837 · GHSA-jh49-7wxx-7wgv

Missing authorization in Everest Forms WordPress plugin

Priority LOW 17

Missing Authorization vulnerability in Everest Forms Everest Forms everest-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Forms: from n/a through 3.6.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS — Published 2026-11-07 No fix listed CWE-862
Open these records in search →