Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Everest Forms Clear all filters
TI-2026-86574 CVE-2026-122669 · GHSA-3p8j-h46m-vhgw

Stored cross-site scripting in WordPress Everest Forms plugin

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This issue affects Everest Forms: from n/a through 3.6.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS — Published 2026-11-07 No fix listed CWE-79
TI-2026-86524 CVE-2026-120837 · GHSA-jh49-7wxx-7wgv

Missing authorization in Everest Forms WordPress plugin

Priority LOW 17

Missing Authorization vulnerability in Everest Forms Everest Forms everest-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Forms: from n/a through 3.6.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS — Published 2026-11-07 No fix listed CWE-862
TI-2026-74725 CVE-2026-108491

Stored cross-site scripting in WordPress Everest Forms plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This issue affects Everest Forms: from n/a through 3.6.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-15 No fix listed CWE-79
TI-2026-69249 CVE-2026-94670 · GHSA-w525-c4vq-qxjw

Reflected cross-site scripting in WordPress Everest Forms plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-07 No fix listed CWE-79