WPEverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

• CVE-2026-91153 Medium 5.3 Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...}) 0.6%
• CVE-2026-91152 Medium 6.1 Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter 0.3%
• CVE-2026-5096 Medium 5.3 Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' 0.4%
• CVE-2026-13167 Medium 4.3 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints 0.5%