Everest%20Forms%20%E2%80%93%20Build%20Contact%20Forms%2C%20Surveys%2C%20Polls%2C%20Quizzes%2C%20Newsletter%20%26%20Application%20Forms%2C%20and%20Many%20More%20with%20Ease!

Everest Forms – Build Contact Forms, Surveys, Polls, Quizzes, Newsletter & Application Forms, and Many More with Ease!

Source -

CNA

CNA CVEs -

ADP CVEs -

CISA CVEs -

NVD CVEs -

1Vulnerabilities found

CVE-2024-1812

Assigner-Wordfence

View Details

Assigner-Wordfence

CVSS Score-7.2||HIGH

EPSS-0.63% / 69.39%

7 Day CHG+0.17%

Published-09 Apr, 2024 | 18:59

Updated-06 May, 2025 | 15:54

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.7 via the 'font_url' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Vendor-wpeverest wpeverest

Product-everest_forms Everest Forms – Build Contact Forms, Surveys, Polls, Quizzes, Newsletter & Application Forms, and Many More with Ease!

CWE ID-CWE-918

Server-Side Request Forgery (SSRF)