WPEverest 厂商相关 69 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
WPEverest 主要提供 WordPress 建站插件及主题服务，其核心用途在于简化网站搭建流程。截至最新统计，该项目已收录 47 条 CVE，历史漏洞多集中于远程代码执行、跨站脚本及权限绕过等高危类型。部分组件因缺乏严格输入验证导致安全风险累积，引发多次大规模利用。建议用户及时更新组件以修复已知缺陷，并遵循最小权限原则配置环境，降低潜在攻击面。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-89101 | Everest Forms 3.6.2 越权访问与删除漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI CWE-639 | 6.5 | Medium | 2026-11-06 |
| CVE-2026-27061 | WordPress 用户注册插件 5.3.0 跨站脚本漏洞 — User Registration CWE-79 | 6.5 | Medium | 2026-10-30 |
| CVE-2026-91153 | Everest Forms 3.6.2 敏感信息泄露漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI CWE-200 | 5.3 | Medium | 2026-10-29 |
| CVE-2026-91152 | Everest Forms 3.6.2 反射跨站脚本漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI CWE-79 | 6.1 | Medium | 2026-10-29 |
| CVE-2026-92798 | User Registration & Membership 5.2.8 远程代码执行漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-94 | 8.1 | High | 2026-10-17 |
| CVE-2026-92978 | User Registration & Membership 5.2.8 跨站请求伪造漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-352 | 4.3 | Medium | 2026-10-17 |
| CVE-2026-96660 | User Registration & Membership 5.2.8 跨站脚本漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-79 | 7.2 | High | 2026-10-17 |
| CVE-2026-87111 | User Registration PRO 6.2.9 未认证存储型跨站脚本漏洞 — User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin CWE-79 | 7.2 | High | 2026-10-16 |
| CVE-2026-15222 | User Registration & Membership 5.2.8 任意短码执行漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-94 | 5.4 | Medium | 2026-10-16 |
| CVE-2026-74017 | WordPress User Registration 5.2.7 访问控制漏洞 — User Registration CWE-862 | 5.3 | Medium | 2026-09-17 |
| CVE-2026-62103 | WordPress Everest Forms 反序列化注入漏洞 — Everest Forms CWE-502 | 9.8 | Critical | 2026-09-11 |
| CVE-2026-5096 | WordPress Everest Forms 服务端请求伪造漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI CWE-918 | 5.3 | Medium | 2026-08-28 |
| CVE-2026-74001 | WordPress User Registration & Membership Pro 授权问题漏洞 — User Registration & Membership Pro CWE-288 | 9.8 | Critical | 2026-08-20 |
| CVE-2026-73995 | WordPress User Registration & Membership 授权问题漏洞 — User Registration CWE-290 | 5.4 | Medium | 2026-08-18 |
| CVE-2026-13167 | WordPress TrueBooker 授权问题漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI CWE-862 | 4.3 | Medium | 2026-08-16 |
| CVE-2026-73403 | wpeverest user registration 授权问题漏洞 — User Registration CWE-862 | 5.3 | Medium | 2026-08-13 |
| CVE-2026-12124 | WordPress PDFDraft 授权问题漏洞 — PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer CWE-862 | 5.3 | Medium | 2026-07-28 |
| CVE-2026-57312 | wpeverest Everest Forms 跨站脚本漏洞 — Everest Forms CWE-79 | 7.1 | High | 2026-06-26 |
| CVE-2026-1869 | wpeverest User Registration & Membership 授权问题漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-862 | 6.5 | Medium | 2026-06-26 |
| CVE-2026-7651 | WordPress plugin User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-639 | 5.3 | Medium | 2026-05-28 |
| CVE-2026-4888 | WordPress plugin Everest Forms 安全漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder CWE-862 | 4.3 | Medium | 2026-05-27 |
| CVE-2026-6145 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-862 | 5.3 | Medium | 2026-05-14 |
| CVE-2026-3601 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-862 | 4.3 | Medium | 2026-05-05 |
| CVE-2026-4882 | WordPress plugin User Registration Advanced Fields 代码问题漏洞 — User Registration Advanced Fields CWE-434 | 9.8 | Critical | 2026-05-02 |
| CVE-2026-42652 | WordPress Plugin User Registration 跨站脚本漏洞 — User Registration CWE-79 | 7.1 | High | 2026-04-29 |
| CVE-2026-5478 | WordPress plugin Everest Forms 安全漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder CWE-22 | 8.1 | High | 2026-04-20 |
| CVE-2026-6203 | WordPress plugin User Registration & Membership 输入验证错误漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-601 | 6.1 | Medium | 2026-04-13 |
| CVE-2026-1865 | WordPress plugin User Registration & Membership SQL注入漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-89 | 6.5 | Medium | 2026-04-08 |
| CVE-2026-3296 | WordPress plugin Everest Forms 代码问题漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder CWE-502 | 9.8 | Critical | 2026-04-08 |
| CVE-2026-3300 | WordPress plugin Everest Forms Pro 代码注入漏洞 — Everest Forms Pro CWE-94 | 9.8 | Critical | 2026-03-31 |
本页汇总了 WPEverest 厂商截至目前公开的全部 69 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。