WordPress Vulnerability Scanner WPSec
Vulnerabilities / Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI vulnerabilities

Advisories WPSec published for Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI. Other sources may list more. Its attack surface: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-16 WPSEC-2026-1051 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart Tag Injection in Form Field Values Medium 5.3 3.6.3
2026-10-16 WPSEC-2026-1050 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.2 - Unauthenticated Stored Cross-Site Scripting via Form Entry Values High 7.2 3.6.3
2026-10-01 WPSEC-2026-0202 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter Medium 6.1 3.6.2
2026-10-01 WPSEC-2026-0201 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Unauthenticated Sensitive Information Exposure via Smart Tags in Submitted Form Field Values Low 3.7 3.6.2
2026-10-01 WPSEC-2026-0200 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Authenticated (Delegated+) Insecure Direct Object Reference via MCP Form and Entry Abilities Medium 6.3 3.6.2

License: CC BY 4.0