CVE-2019-13575

CRITICAL 9.8CVE-2019-13575 · Published 18/07/2019 · updated 17/06/2026

In short

CVE-2019-13575 is a CRITICAL (CVSS 9.8) vulnerability affecting everest forms (wpeverest).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
everest forms wpeverest	`≤ 1.4.9`	No fix yet

Description

A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php

References

fortiguard.com/zeroday/FG-VD-19-096 · Not Applicable
wpeverest/everest-forms commit 755d095 · Patch
wpeverest/everest-forms commit 755d095 · Patch
wordpress.org/plugins/everest-forms · Release Notes
wpvulndb.com/vulnerabilities/9466 · Third Party Advisory

More vulnerabilities in everest forms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

everest forms

wpeverest

≤ 1.4.9

No fix yet

More vulnerabilities in everest forms

See all →