Server-Side Request Forgery Vulnerability in Everest Forms Plugin for WordPress
CVE-2026-5096

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder With Ai
Vendor
CVE Published:
28 August 2026

What is CVE-2026-5096?

The Everest Forms plugin for WordPress is susceptible to Server-Side Request Forgery (SSRF), impacting all versions up to and including 3.4.4. This vulnerability arises from the load_previous_field_value() method in class-evf-form-task.php, which inadequately validates URLs submitted via $_POST data for upload fields. Consequently, this allows attackers to provide arbitrary URLs, leading to unprotected HTTP HEAD requests sent from the WordPress server to malicious endpoints. This manipulation can be executed by unauthenticated users through a form submission that triggers a re-rendering of the form by leaving a required field blank.

Affected Version(s)

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI 0 <= 3.4.4

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/everest-forms/...
https://plugins.trac.wordpress.org/browser/everest-forms/...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

h0xilo
.