Vulnerability index

Browse CVEs

23 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Everest Forms Frontend Listing CRITICAL 9.8
CVE-2025-60210

Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing everest-forms-frontend-listing allows Object Injection.…

Fix: after 1.0.5
Fix from $2,300 2025-10-22
Everest Forms HIGH 7.5
CVE-2025-5927

The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_fi…

Fix: 1.9.5+
Fix from $1,950 2025-06-25
Everest Forms MEDIUM 6.1
CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.

Fix: 3.0.9+
Fix from $1,600 2025-05-12
User Registration \& Membership MEDIUM 6.1
CVE-2025-39400

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration a…

Fix: 4.2.0 / 5.2.0+
Fix from $1,600 2025-04-24
User Registration \& Membership HIGH 8.1
CVE-2025-2594EPSS 9%

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabl…

Fix: 4.1.3 / 5.1.3+
Fix from $1,950 2025-04-22
User Registration \& Membership HIGH 8.1
CVE-2025-2563EPSS 46%

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabl…

Fix: 4.1.2 / 5.1.2+
Fix from $1,950 2025-04-14
User Registration \& Membership MEDIUM 5.3
CVE-2025-3282

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Obj…

Fix: 4.1.4+
Fix from $1,600 2025-04-12
Everest Forms CRITICAL 9.8
CVE-2025-3439

The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Inje…

Fix: 3.1.2+
Fix from $2,300 2025-04-11
Everest Forms MEDIUM 6.3
CVE-2025-3422

The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary s…

Fix: 3.1.2+
Fix from $1,600 2025-04-11
Everest Forms MEDIUM 6.1
CVE-2025-3421

The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross…

Fix: 3.1.2+
Fix from $1,600 2025-04-11
User Registration MEDIUM 6.1
CVE-2025-1511

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Reflected Cross-Sit…

Fix: 4.1.0+
Fix from $1,600 2025-02-28
Everest Forms CRITICAL 9.8
CVE-2025-1128EPSS 29%

The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file…

Fix: 3.0.9.5+
Fix from $2,300 2025-02-25
User Registration MEDIUM 5.3
CVE-2023-29429

Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

Fix: 2.3.3+
Fix from $1,600 2024-12-09
Everest Forms MEDIUM 5.3
CVE-2023-51377

Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.

Fix: 2.0.3.1+
Fix from $1,600 2024-06-14
Everest Forms HIGH 7.2
CVE-2024-1812

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.7 via the 'font_url' pa…

Fix: 2.0.8+
Fix from $1,950 2024-04-09
User Registration \& Membership HIGH 8.8
CVE-2023-27459

Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1.

Fix: 2.3.3+
Fix from $1,950 2024-03-26
User Registration \& Membership MEDIUM 6.1
CVE-2024-1720

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Si…

Fix: 3.1.5+
Fix from $1,600 2024-03-07
User Registration CRITICAL 9.9
CVE-2023-3342

The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation…

Fix: 3.0.2.1+
Fix from $2,300 2023-07-13
User Registration HIGH 8.8
CVE-2023-3343

The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untru…

Fix: after 3.0.1
Fix from $1,950 2023-07-13
User Registration HIGH 7.5
CVE-2022-3912

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauth…

Fix: 2.2.4.1+
Fix from $1,950 2022-12-12
Everest Forms MEDIUM 6.1
CVE-2021-24907

The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter before outputting it back in an a…

Fix: 1.8.0+
Fix from $1,600 2021-12-21
User Registration MEDIUM 5.4
CVE-2021-24654

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly vi…

Fix: 2.0.2+
Fix from $1,600 2021-10-04
Everest Forms CRITICAL 9.8
CVE-2019-13575

A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability wou…

Fix: after 1.4.9
Fix from $2,300 2019-07-18