WPEverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

• CVE-2026-4888 Medium 4.3 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending 0.3%
• CVE-2026-5478 High 8.1 Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter 1.0%
• CVE-2026-3296 Critical 9.8 Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata 3.6%
• CVE-2025-3421 Medium 6.1 Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting 0.4%
• CVE-2025-3422 Medium 5.4 Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.3%
• CVE-2025-3439 Critical 9.8 Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection 1.2%
• CVE-2025-1128 Critical 9.8 Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion 42.4%
• CVE-2024-1812 High 7.2 Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url 0.5%