Wpeverest vulnerabilities

Products

• User Registration 31
• Everest Forms 14
• Everest Forms 13
• User Registration 9
• Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder 8
• User Registration \& Membership 8
• Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder With Ai 5
• Everest Forms Pro 4
• User Registration Pro – Custom Registration Form, Login Form, And User Profile Wordpress Plugin 2

Newest

• themegrill user registration WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability CVE-2026-119522 5.3 MediumNovember 7, 2026
• themegrill user registration WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability CVE-2026-124258 5.3 MediumNovember 7, 2026
• everest forms forms, wpeverest everest forms +1 more WordPress Everest Forms plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-122669 6.5 MediumNovember 7, 2026
• everest forms forms, wpeverest everest forms +1 more WordPress Everest Forms plugin <= 3.6.3 - Broken Access Control vulnerability CVE-2026-120837 4.3 MediumNovember 7, 2026
• themegrill user registration WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability CVE-2026-120840 4.3 MediumNovember 7, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder with ai Everest Forms <= 3.6.2 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Entry/Form Disclosure and Deletion via MCP /tools/call JSON-RPC Endpoint CVE-2026-89101 6.5 MediumNovember 6, 2026
• wpeverest user registration WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-27061 6.5 MediumOctober 30, 2026
• themegrill user registration WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability CVE-2026-25450 5.3 MediumOctober 29, 2026
• themegrill user registration WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability CVE-2026-25467 5.3 MediumOctober 29, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder with ai Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...}) CVE-2026-91153 5.3 MediumOctober 29, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder with ai Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter CVE-2026-91152 6.1 MediumOctober 29, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag CVE-2026-92798 8.1 HighOctober 17, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action() CVE-2026-92978 4.3 MediumOctober 17, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value CVE-2026-96660 7.2 HighOctober 17, 2026
• wpeverest user registration pro – custom registration form, login form, and user profile wordpress plugin User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header CVE-2026-87111 7.2 HighOctober 16, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name CVE-2026-15222 5.4 MediumOctober 16, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-105882 6.5 MediumOctober 15, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability CVE-2026-109692 7.1 HighOctober 15, 2026
• everest forms forms, wpeverest everest forms +1 more WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-108491 7.1 HighOctober 15, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability CVE-2026-109699 5.4 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability CVE-2026-106598 5.3 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-105881 6.5 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-103076 5.4 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability CVE-2026-106597 5.3 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability CVE-2026-96334 5.6 MediumOctober 9, 2026
• everest forms forms, wpeverest everest forms +1 more WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-94670 7.1 HighOctober 7, 2026
• wpeverest user registration WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability CVE-2026-74017 5.3 MediumSeptember 17, 2026
• wpeverest everest forms WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability CVE-2026-62103 9.8 CriticalSeptember 11, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder with ai Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' CVE-2026-5096 5.3 MediumAugust 28, 2026
• wpeverest user registration & membership pro WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability CVE-2026-74001 9.8 CriticalAugust 20, 2026
• wpeverest user registration WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability CVE-2026-73995 5.4 MediumAugust 18, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder with ai Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX… CVE-2026-13167 4.3 MediumAugust 16, 2026
• wpeverest user registration WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability CVE-2026-73403 5.3 MediumAugust 13, 2026
• wpeverest pdfdraft – drag & drop pdf builder, pdf viewer, embed & download pdf, certificate & invoice designer PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameter CVE-2026-12124 5.3 MediumJuly 28, 2026
• unknown everest forms Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints CVE-2026-12270 6.5 MediumJuly 9, 2026
• unknown everest forms Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts CVE-2026-11571 7.5 HighJuly 9, 2026
• wpeverest everest forms WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57312 7.1 HighJune 26, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability CVE-2026-52701 6.5 MediumJune 26, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass CVE-2026-1869 6.5 MediumJune 26, 2026
• themegrill user registration WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability CVE-2026-25425 7.5 HighJune 15, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter CVE-2026-7651 5.3 MediumMay 28, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending CVE-2026-4888 4.3 MediumMay 27, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter CVE-2026-6145 Public exploit 5.3 MediumMay 14, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content Modification CVE-2026-3601 4.3 MediumMay 5, 2026
• wpeverest user registration advanced fields User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload CVE-2026-4882 Public exploit 9.8 CriticalMay 2, 2026
• wpeverest user registration WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-42652 7.1 HighApril 29, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter CVE-2026-5478 8.1 HighApril 20, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter CVE-2026-6203 6.1 MediumApril 13, 2026
• wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[] CVE-2026-1865 6.5 MediumApril 8, 2026
• wpeverest everest forms – contact form, payment form, quiz, survey & custom form builder Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata CVE-2026-3296 Public exploit 9.8 CriticalApril 8, 2026
• Show olderLoading…