wpeverest

Records81All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

wpeverest records in CISA KEV

No wpeverest vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Everest Forms 14 records HIGH User Registration 8 records HIGH User Registration & Membership 8 records HIGH Contact Form 1 record LOW Everest Forms Frontend Listing 1 record MEDIUM

Records

1 record in Contact Form · all components

TI-2021-06971 CVE-2021-24689 · GHSA-mwq5-5f7r-qcv9

Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read

LOW 25

The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0132 Published 2022-02-28 No fix listed CWE-22

Open these records in search →

Critical	11
High	20
Medium	49
Low	1
No CVSS	0