Sploitus

14 exploited vulnerabilities in Everest Forms

Vulnerabilities with publicly known exploits

Vendors
WordPress, Wpeverest, Unknown
With known exploits
14
Affected Wpeverest Everest Forms versions
< 2.0.8

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2025-3439
CVSS 9.8 CRITICAL 2025-04-11
CVE-2025-1128
CVSS 9.8 CRITICAL 2025-02-25FIX AVAILABLE
CVE-2026-11571
CVSS 7.5 HIGH 2026-07-09FIX AVAILABLE
CVE-2025-5927
CVSS 7.5 HIGH 2025-06-25FIX AVAILABLE
CVE-2024-1812 1 exploit
CVSS 7.2 HIGH 2024-04-09
Everest Forms < 2.0.8 - Unauthenticated Server-Side Request Forgery via font_url
CVE-2026-12270
CVSS 6.5 MEDIUM 2026-07-09FIX AVAILABLE
CVE-2025-3422
CVSS 6.3 MEDIUM 2025-04-11FIX AVAILABLE
CVE-2025-26841
CVSS 6.1 MEDIUM 2025-05-12FIX AVAILABLE
CVE-2025-3421
CVSS 6.1 MEDIUM 2025-04-11FIX AVAILABLE
CVE-2023-51695
CVSS 5.9 MEDIUM 2024-02-01FIX AVAILABLE
CVE-2023-51377
CVSS 5.3 MEDIUM 2024-06-14FIX AVAILABLE
CVE-2024-8542
CVSS 4.8 MEDIUM 2025-05-15FIX AVAILABLE
CVE-2024-10471
CVSS 4.8 MEDIUM 2024-11-26FIX AVAILABLE
CVE-2024-13125
CVSS 3.5 LOW 2025-02-13FIX AVAILABLE