Approved changes feed: RSS · Atom

cpe:2.3:a:wpeverest:everest_forms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpeverest (893868fd-7465-5174-8b2f-d1079aaa15d0)
ProductEverest Forms (b984b658-2e16-5d9d-b705-30442968cb36)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpeverest/everest-forms purl2cpe 2026-06-01 10:14:04.469551

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22422 vulnerable 2026-06-03 15:15:53.283597 WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability
MEDIUM (5.3)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in wpeverest Everest Forms everest-forms allows Code Injection.This issue affects Everest Forms: from n/a through <= 3.4.1.
Published: 2026-02-19T08:26:48.111Z
Updated: 2026-04-28T17:08:36.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51377 vulnerable 2026-06-03 14:53:32.082570 WordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.
Published: 2024-06-14T05:45:05.071Z
Updated: 2026-04-28T16:09:01.355Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.