Everest Forms — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Everest Forms, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-94670	WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-10-07
CVE-2026-62103	WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability CWE-502	9.8	Critical	2026-09-11
CVE-2026-12270	Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints	-	-	2026-07-09
CVE-2026-11571	Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts	-	-	2026-07-09
CVE-2026-57312	WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-06-26
CVE-2026-22422	WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability CWE-80	5.3	Medium	2026-02-19
CVE-2024-8542	Everest Forms < 3.0.3.1 - Admin+ Stored XSS	4.8^AI	Medium ^AI	2025-05-15
CVE-2024-13125	Everest Forms < 3.0.8.1 - Admin+ Stored XSS	4.8	-	2025-02-13
CVE-2024-10471	Everest Forms < 3.0.4.2 - Admin+ Stored XSS	4.8^AI	Medium ^AI	2024-11-26
CVE-2023-51377	WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability CWE-862	5.3	Medium	2024-06-14

All 10 known CVE vulnerabilities affecting Everest Forms with full Chinese analysis, references, and POCs where available.