Skip to contentWpeverest vulnerabilities
Newest
- wpeverest everest forms proEverest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation FieldCVE-2026-3300Public exploitEPSS 39.2%9.8 Critical
- wpeverest user registrationWordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerabilityCVE-2026-32488Public exploit8.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule ManipulationCVE-2026-40565.4 Medium
- wpeverest everest forms proWordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-270707.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership RegistrationCVE-2026-1492Public exploitEPSS 28.9%9.8 Critical
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Authentication BypassCVE-2026-17798.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User DeletionCVE-2026-23565.3 Medium
- wpeverest everest formsWordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerabilityCVE-2026-224225.3 Medium
- wpeverest user registrationWordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerabilityCVE-2026-243534.3 Medium
- wpeverest user registrationWordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerabilityCVE-2025-679568.2 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post DeletionCVE-2025-149765.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Sc…CVE-2025-133676.4 Medium
- wpeverest everest forms proEverest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form SignatureCVE-2025-88715.6 Medium
- wpeverest everest forms - frontend listing, everest forms frontend listing +1 moreWordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection VulnerabilityCVE-2025-602109.8 Critical
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL InjectionCVE-2025-90854.9 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict ShortcodeCVE-2025-68316.4 Medium
- wpeverest everest forms, everest forms pro +1 moreEverest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File DeletionCVE-2025-59277.5 High
- unknown everest formsEverest Forms < 3.0.3.1 - Admin+ Stored XSSCVE-2024-85424.8 Medium
- wpeverest everest formsCross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to...CVE-2025-268416.1 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User DeletionCVE-2025-32815.3 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-394007.1 High
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.3 - Authentication BypassCVE-2025-2594Public exploit8.1 High
- wpeverest user registration pro – custom registration form, login form, and user profile wordpress pluginUser Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile <= 5.1.3 - Cross-Site Request Forgery to User DeletionCVE-2025-32844.3 Medium
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.2- Unauthenticated Privilege EscalationCVE-2025-2563Public exploitEPSS 49.1%8.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership ModificationCVE-2025-32825.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password UpdateCVE-2025-32924.3 Medium
- wpeverest everest forms, everest forms – contact form, payment form, quiz, survey & custom form builder +1 moreEverest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode ExecutionCVE-2025-34225.4 Medium
- wpeverest everest forms, everest forms – contact form, payment form, quiz, survey & custom form builder +1 moreEverest Forms <= 3.1.1 - Reflected Cross-Site ScriptingCVE-2025-34216.1 Medium
- wpeverest everest forms, everest forms – contact form, payment form, quiz, survey & custom form builder +1 moreEverest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object InjectionCVE-2025-34399.8 Critical
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-308995.9 Medium
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site ScriptingCVE-2025-15116.1 Medium
- wpeverest everest forms, everest forms – contact form, payment form, quiz, survey & custom form builder +1 moreEverest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and DeletionCVE-2025-1128EPSS 42.4%9.8 Critical
- unknown everest formsEverest Forms < 3.0.8.1 - Admin+ Stored XSSCVE-2024-131253.5 Low
- wpeverest user registrationWordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerabilityCVE-2023-294295.3 Medium
- unknown everest formsEverest Forms < 3.0.4.2 - Admin+ Stored XSSCVE-2024-104714.8 Medium
- wpeverest everest formsWordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerabilityCVE-2023-513775.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege EscalationCVE-2024-49587.1 High
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationCVE-2024-24178.8 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media DeletionCVE-2024-32956.5 Medium
- wpeverest everest forms, everest forms – contact form, payment form, quiz, survey & custom form builder +1 moreEverest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_urlCVE-2024-18127.2 High
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerabilityCVE-2023-274597.4 High
- unknown user registration, strategy11 user registration forms +1 moreFormidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account TakeoverCVE-2024-12906.5 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site ScriptingCVE-2024-17204.7 Medium
- wpeverest everest forms – build contact forms, surveys, polls, application forms, and more with ease!, everest forms +1 moreWordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-516955.9 Medium
- unknown user registrationUser Registration < 3.0.4.2 - Admin+ Stored XSSCVE-2023-52284.8 Medium
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2023-33429.9 Critical
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object InjectionCVE-2023-33438.8 High
- wpeverest user registrationWordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239875.9 Medium
- unknown user registrationUser Registration < 2.2.4.1 - Subscriber+ Arbitrary File UploadCVE-2022-39127.5 High
- wpeverest contact form, unknown contact forms – drag & drop contact form builder +1 moreContact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File ReadCVE-2021-246894.9 Medium
- Show moreLoading…