CVEs we hold for Wpeverest
Records whose assigning authority named Wpeverest as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-7651User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary…wpeverest User Registration & Membership – Free & Paid…
CVE-2026-74017WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerabilitywpeverest User Registration
CVE-2026-74001WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerabilityWPEverest User Registration & Membership Pro
CVE-2026-73995WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerabilitywpeverest User Registration
CVE-2026-73403WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerabilitywpeverest User Registration
CVE-2026-62103WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerabilitywpeverest Everest Forms
CVE-2026-6203User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameterwpeverest User Registration & Membership – Free & Paid…
CVE-2026-6145User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action'…wpeverest User Registration & Membership – Free & Paid…
CVE-2026-57312WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerabilitywpeverest Everest Forms
CVE-2026-5478Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameterwpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2026-5096Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'wpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2026-4888Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to…wpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2026-4882User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File UploadWPEverest User Registration Advanced Fields
CVE-2026-42652WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerabilitywpeverest User Registration
CVE-2026-4056User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule…wpeverest User Registration & Membership – Free & Paid…
CVE-2026-3601User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content…wpeverest User Registration & Membership – Free & Paid…
CVE-2026-3300Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation FieldWPEverest Everest Forms Pro
CVE-2026-3296Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadatawpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2026-32488WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerabilitywpeverest User Registration
CVE-2026-27070WordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerabilityWPEverest Everest Forms Pro
CVE-2026-24353WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerabilitywpeverest User Registration
CVE-2026-2356User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletionwpeverest User Registration & Membership – Free & Paid…
CVE-2026-22422WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerabilitywpeverest Everest Forms
CVE-2026-1869User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypasswpeverest User Registration & Membership – Free & Paid…
CVE-2026-1865User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]wpeverest User Registration & Membership – Free & Paid…
CVE-2026-1779User Registration & Membership <= 5.1.2 - Authentication Bypasswpeverest User Registration & Membership – Free & Paid…
CVE-2026-1492User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registrationwpeverest User Registration & Membership – Free & Paid…
CVE-2026-13167Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization…wpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2026-12124PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameterwpeverest PDFDraft – Drag & Drop PDF Builder, PDF Viewer…
CVE-2025-9085User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injectionwpeverest User Registration & Membership – Free & Paid…
CVE-2025-8871Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form SignatureWPEverest Everest Forms Pro
CVE-2025-6831User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcodewpeverest User Registration & Membership – Free & Paid…
CVE-2025-67956WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerabilitywpeverest User Registration
CVE-2025-60210WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerabilitywpeverest Everest Forms - Frontend Listing
CVE-2025-5927Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File DeletionWPEverest Everest Forms Pro
CVE-2025-39400WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilitywpeverest User Registration
CVE-2025-3439Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated…wpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2025-3422Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Executionwpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2025-3421Everest Forms <= 3.1.1 - Reflected Cross-Site Scriptingwpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2025-3292User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct…wpeverest User Registration & Membership – Free & Paid…
CVE-2025-3284User Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile <= 5.1.3 - Cross-Site…WPEverest User Registration PRO – Custom Registration Form…
CVE-2025-3282User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct…wpeverest User Registration & Membership – Free & Paid…
CVE-2025-3281User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct…wpeverest User Registration & Membership – Free & Paid…
CVE-2025-30899WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerabilitywpeverest User Registration
CVE-2025-1511User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site…wpeverest User Registration & Membership – Free & Paid…
CVE-2025-14976User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletionwpeverest User Registration & Membership – Free & Paid…
CVE-2025-13367User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction…wpeverest User Registration & Membership – Free & Paid…
CVE-2025-1128Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletionwpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2024-4958User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing…wpeverest User Registration & Membership – Free & Paid…
CVE-2024-3295User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing…wpeverest User Registration & Membership – Free & Paid…
CVE-2024-2417User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing…wpeverest User Registration & Membership – Free & Paid…
CVE-2024-1812Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_urlwpeverest Everest Forms – Contact Form, Payment Form, Quiz…
CVE-2024-1720User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated…wpeverest User Registration & Membership – Free & Paid…
CVE-2023-51695WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)WPEverest Everest Forms – Build Contact Forms, Surveys…
CVE-2023-51377WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerabilityWPEverest Everest Forms
CVE-2023-3343User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injectionwpeverest User Registration & Membership – Free & Paid…
CVE-2023-3342User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Uploadwpeverest User Registration & Membership – Free & Paid…
CVE-2023-29429WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerabilityWPEverest User Registration
CVE-2023-27459WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerabilityWPEverest User Registration
CVE-2023-23987WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)WPEverest User Registration
60 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.