Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI vulnerabilities

2 known vulnerabilities in Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI from Wpeverest. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Everest Forms – Contact Form, Payment Form…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-115483Nov 10, 2026Wpeverest

  The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach_entry_files() function. This is due to the function attaching any entry field value whose meta key matches /signature_/ to th

• 8.2 High severity

  Everest Forms – Contact Form, Payment Form…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-120513Nov 10, 2026Wpeverest

  The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the remove_csv_file_after_email_send function in all versions up to, and