CVE-2025-3422 — Code Injection in Everest Forms

CWE-94 — Code Injection3 documents3 sources
Severity
6.3MEDIUMNVD
CNA5.4
EPSS
0.3%
top 42.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Wpeverest Everest Forms
Timeline
PublishedApr 11

Description

The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

Patches

Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-7rrr-jvfx-w2gc: The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary sh↗2025-04-11
▶
CVEList
Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution↗2025-04-11
▶
CVE-2025-3422 — Code Injection in Everest Forms | cvebase