CVE Tools
Track your stack

Wpeverest

9 CVEs tracked since 2025. Since Apr 2025, none of them reached CISA KEV.

Wpeverest CVEs per month

Apr 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpeverest CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0490
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wpeverest's monthly top three, with their CVEs summed over those months.

  1. User Registration \& Membership51 month
  2. Everest Forms31 month
  3. Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpeverest.

  1. CVE-2026-92798User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag8.1
  2. CVE-2026-92978User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()4.3
  3. CVE-2026-96660User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value7.2
  4. CVE-2026-87111User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header7.2
  5. CVE-2026-15222User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name5.4
  6. CVE-2026-74017WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability5.3
  7. CVE-2026-62103WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability9.8
  8. CVE-2026-5096Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'5.3
  9. CVE-2026-74001WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability9.8
  10. CVE-2026-73995WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability5.4
  11. CVE-2026-13167Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints4.3
  12. CVE-2026-73403WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability5.3
  13. CVE-2026-12124PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameter5.3
  14. CVE-2026-57312WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  15. CVE-2026-1869User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass6.5

The record

Peak rank
#95 in Apr 2025
Busiest month shown
Apr 2025, 9 CVEs
Months with a KEV entry
0 since Apr 2025
Monthly snapshots
1 since 2025
Wpeverest's full record, month by month