Skip to content
OpenAdvisories

Vendor

WPEverest

71 known vulnerabilities.

Products

User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 28 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder 15 User Registration 13 Everest Forms Pro 4 Everest Forms 4 User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin 2 PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer 1 Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease! 1 Everest Forms - Frontend Listing 1 User Registration & Membership Pro 1 User Registration Advanced Fields 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4882 Public exploit

    User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

    The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to, and including, 1.6.20. This makes it possible for unauthen…

    WPEverest User Registration Advanced Fields Web / CMS
  • Critical 9.8
    CVE-2026-3300 Public exploit Scanner template EPSS 39%

    Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

    The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's process_filter() function concatenating user-submitted form field val…

    WPEverest Everest Forms Pro Web / CMS
  • Critical 9.8
    CVE-2026-1492 Public exploit Scanner template EPSS 29%

    User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

    The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. Th…

    WPEverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder Web / CMS