wpeverest Everest Forms

2 known vulnerabilities in wpeverest Everest Forms, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-62103 CVSS 9.8 critical Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.
  • CVE-2026-5096 CVSS 5.3 medium The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is…