Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpeverest

CVE ID	Title	CVSS	Severity	Published
CVE-2026-5096	Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' CWE-918	5.3	Medium	2026-08-28
CVE-2026-13167	Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints CWE-862	4.3	Medium	2026-08-16

All 2 known CVE vulnerabilities affecting Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI with full Chinese analysis, references, and POCs where available.