Wpeverest vulnerabilities
71 CVEs and advisories name Wpeverest as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-51377WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability
- CVE-2024-4958User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation
- CVE-2024-2417User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
- CVE-2024-3295User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media Deletion
- CVE-2024-1812Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
- CVE-2023-27459WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
- CVE-2024-1720User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting
- CVE-2023-51695WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3342User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2023-3343User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
- CVE-2023-23987WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)