WPEverest Everest Forms Pro

• CVE-2026-3300 Critical 9.8 Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field 39.2%
• CVE-2026-27070 High 7.1 WordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-8871 Medium 5.6 Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature 0.3%
• CVE-2025-5927 High 7.5 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion 0.7%