{"schema_version":1,"title":"WPEverest Everest Forms vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in WPEverest Everest Forms: 0 in the last 7 days and 4 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-62103, was published on 11 September 2026.","url":"https://junglewise.ai/threats/technologies/everest-forms","json_url":"https://junglewise.ai/threats/technologies/everest-forms.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/everest-forms","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":7,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":4,"last_365_days":7},"latest":[{"cve":"CVE-2026-62103","cvss":9.8,"epss":0.0056,"slug":"cve-2026-62103-everest-forms-php-object-injection","title":"Everest Forms PHP Object Injection","severity":"critical","exploited":false,"published_at":"2026-09-11T19:17:43.207+00:00","url":"https://junglewise.ai/threats/cve-2026-62103-everest-forms-php-object-injection"},{"cve":"CVE-2026-5096","cvss":5.3,"epss":0.0041,"slug":"cve-2026-5096-everest-forms-server-side-request-forgery-in-upload-handling","title":"Everest Forms Server-Side Request Forgery in upload handling","severity":"medium","exploited":false,"published_at":"2026-08-28T16:18:18.82+00:00","url":"https://junglewise.ai/threats/cve-2026-5096-everest-forms-server-side-request-forgery-in-upload-handling"},{"cve":"CVE-2026-12270","cvss":5.3,"slug":"cve-2026-12270-wpeverest-everest-forms-missing-authorization-in-site-assistant","title":"WPEverest Everest Forms missing authorization in Site Assistant REST API","severity":"info","exploited":false,"published_at":"2026-07-09T07:16:23.21+00:00","url":"https://junglewise.ai/threats/cve-2026-12270-wpeverest-everest-forms-missing-authorization-in-site-assistant"},{"cve":"CVE-2026-11571","cvss":5.9,"slug":"cve-2026-11571-everest-forms-information-disclosure-via-residual-csv-artifacts","title":"Everest Forms information disclosure via residual CSV artifacts","severity":"info","exploited":false,"published_at":"2026-07-09T07:16:22.847+00:00","url":"https://junglewise.ai/threats/cve-2026-11571-everest-forms-information-disclosure-via-residual-csv-artifacts"},{"cve":"CVE-2026-57312","cvss":7.1,"slug":"cve-2026-57312-wpeverest-everest-forms-unauthenticated-reflected-xss","title":"WPEverest Everest Forms unauthenticated reflected XSS","severity":"high","exploited":false,"published_at":"2026-06-26T15:16:47.563+00:00","url":"https://junglewise.ai/threats/cve-2026-57312-wpeverest-everest-forms-unauthenticated-reflected-xss"},{"cve":"CVE-2026-4888","cvss":4.3,"slug":"cve-2026-4888-wpeverest-everest-forms-unauthorized-email-sending-in-send-test","title":"WPEverest Everest Forms unauthorized email sending in send_test_email","severity":"medium","exploited":false,"published_at":"2026-05-28T00:16:43.797+00:00","url":"https://junglewise.ai/threats/cve-2026-4888-wpeverest-everest-forms-unauthorized-email-sending-in-send-test"},{"cve":"CVE-2026-3296","cvss":9.8,"epss":0.0347,"slug":"cve-2026-3296-wpeverest-everest-forms-php-object-injection-in-form-entry","title":"WPEverest Everest Forms PHP Object Injection in form entry metadata","severity":"critical","exploited":false,"published_at":"2026-04-08T02:16:04.067+00:00","url":"https://junglewise.ai/threats/cve-2026-3296-wpeverest-everest-forms-php-object-injection-in-form-entry"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"WPEverest User Registration","slug":"user-registration","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/user-registration"},{"name":"WPEverest User Registration & Membership","slug":"user-registration-membership","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/user-registration-membership"}],"technology":{"hub":true,"name":"WPEverest Everest Forms","slug":"everest-forms","vendor":{"name":"WPEverest","slug":"wpeverest","url":"https://junglewise.ai/threats/vendors/wpeverest"},"aliases":[],"category":"WordPress Plugin","homepage":"https://wpeverest.com/wordpress-plugins/everest-forms/","repo_url":"https://github.com/wpeverest/everest-forms","description":"A drag-and-drop contact form builder plugin for WordPress that includes features for payments, quizzes, and surveys.","url":"https://junglewise.ai/threats/technologies/everest-forms"},"most_severe":[{"cve":"CVE-2026-3296","cvss":9.8,"epss":0.0347,"slug":"cve-2026-3296-wpeverest-everest-forms-php-object-injection-in-form-entry","title":"WPEverest Everest Forms PHP Object Injection in form entry metadata","severity":"critical","exploited":false,"published_at":"2026-04-08T02:16:04.067+00:00","url":"https://junglewise.ai/threats/cve-2026-3296-wpeverest-everest-forms-php-object-injection-in-form-entry"},{"cve":"CVE-2026-62103","cvss":9.8,"epss":0.0056,"slug":"cve-2026-62103-everest-forms-php-object-injection","title":"Everest Forms PHP Object Injection","severity":"critical","exploited":false,"published_at":"2026-09-11T19:17:43.207+00:00","url":"https://junglewise.ai/threats/cve-2026-62103-everest-forms-php-object-injection"},{"cve":"CVE-2026-57312","cvss":7.1,"slug":"cve-2026-57312-wpeverest-everest-forms-unauthenticated-reflected-xss","title":"WPEverest Everest Forms unauthenticated reflected XSS","severity":"high","exploited":false,"published_at":"2026-06-26T15:16:47.563+00:00","url":"https://junglewise.ai/threats/cve-2026-57312-wpeverest-everest-forms-unauthenticated-reflected-xss"},{"cve":"CVE-2026-5096","cvss":5.3,"epss":0.0041,"slug":"cve-2026-5096-everest-forms-server-side-request-forgery-in-upload-handling","title":"Everest Forms Server-Side Request Forgery in upload handling","severity":"medium","exploited":false,"published_at":"2026-08-28T16:18:18.82+00:00","url":"https://junglewise.ai/threats/cve-2026-5096-everest-forms-server-side-request-forgery-in-upload-handling"},{"cve":"CVE-2026-4888","cvss":4.3,"slug":"cve-2026-4888-wpeverest-everest-forms-unauthorized-email-sending-in-send-test","title":"WPEverest Everest Forms unauthorized email sending in send_test_email","severity":"medium","exploited":false,"published_at":"2026-05-28T00:16:43.797+00:00","url":"https://junglewise.ai/threats/cve-2026-4888-wpeverest-everest-forms-unauthorized-email-sending-in-send-test"},{"cve":"CVE-2026-11571","cvss":5.9,"slug":"cve-2026-11571-everest-forms-information-disclosure-via-residual-csv-artifacts","title":"Everest Forms information disclosure via residual CSV artifacts","severity":"info","exploited":false,"published_at":"2026-07-09T07:16:22.847+00:00","url":"https://junglewise.ai/threats/cve-2026-11571-everest-forms-information-disclosure-via-residual-csv-artifacts"},{"cve":"CVE-2026-12270","cvss":5.3,"slug":"cve-2026-12270-wpeverest-everest-forms-missing-authorization-in-site-assistant","title":"WPEverest Everest Forms missing authorization in Site Assistant REST API","severity":"info","exploited":false,"published_at":"2026-07-09T07:16:23.21+00:00","url":"https://junglewise.ai/threats/cve-2026-12270-wpeverest-everest-forms-missing-authorization-in-site-assistant"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}