WP-Safety

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Security & Risk Analysis

wordpress.org/plugins/everest-forms

The best WordPress form builder. Create contact forms, payment forms, conversational forms, custom forms, surveys, & quizzes using drag and drop.

100K active installs v3.4.5 PHP 7.2+ WP 5.5+ Updated Apr 16, 2026
contact-formcustom-formform-builderformssurvey
77
B · Generally Safe
CVEs total15
Unpatched0
Last CVEApr 20, 2026
Plugin page Download
Safety Verdict

Is Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Safe to Use in 2026?

Mostly Safe

Score 77/100

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder is generally safe to use. 15 past CVEs were resolved.

15 known CVEsLast CVE: Apr 20, 2026Updated 1mo ago
Risk Assessment

Everest Forms v3.4.3 exhibits a mixed security posture. While the plugin demonstrates good practices with a high percentage of prepared SQL statements and proper output escaping, there are notable areas of concern. The presence of the 'unserialize' function is a red flag, especially when combined with 11 taint flows flagged as having unsanitized paths and 4 identified as high severity. This combination suggests a potential for deserialization vulnerabilities that could lead to code execution or other critical impacts if user-supplied data reaches these functions without proper sanitization. The plugin's history of 12 known CVEs, including critical and high severity issues like deserialization, code injection, and XSS, further amplifies these concerns, even though none are currently unpatched. This pattern indicates a recurring struggle with securing sensitive operations and handling user input, demanding vigilance from users and developers alike. In conclusion, while the plugin has a substantial attack surface and some positive security hygiene, the identified taint flow issues and historical vulnerability trends necessitate careful consideration of its security.

Key Concerns

  • High severity taint flows found
  • Unsanitized paths in taint flows
  • Dangerous function: unserialize used
  • History of critical CVEs
  • History of high severity CVEs
  • Bundled library: Select2
Vulnerabilities
15 published

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Security Vulnerabilities

CVEs by Year

1 CVE in 2019
2019
1 CVE in 2021
2021
2 CVEs in 2023
2023
3 CVEs in 2024
2024
6 CVEs in 2025
2025
2 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
4
High
2
Medium
9

15 total CVEs

CVE-2026-5478high · 8.1Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter

Apr 20, 2026 Patched in 3.4.5 (1d)
CVE-2026-3296critical · 9.8Deserialization of Untrusted Data

Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata

Apr 7, 2026 Patched in 3.4.4 (1d)
CVE-2026-22422medium · 6.5Improper Control of Generation of Code ('Code Injection')

Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution

Sep 26, 2025 Patched in 3.4.2 (221d)
CVE-2025-3439critical · 9.8Deserialization of Untrusted Data

Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection

Apr 10, 2025 Patched in 3.1.2 (2d)
CVE-2025-3422medium · 5.4Improper Control of Generation of Code ('Code Injection')

Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

Apr 10, 2025 Patched in 3.1.2 (2d)
CVE-2025-3421medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting

Apr 10, 2025 Patched in 3.1.2 (2d)
CVE-2025-1128critical · 9.8Unrestricted Upload of File with Dangerous Type

Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

Feb 17, 2025 Patched in 3.0.9.5 (8d)
CVE-2024-13125medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting

Jan 17, 2025 Patched in 3.0.8.1 (36d)
CVE-2024-10471medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Nov 5, 2024 Patched in 3.0.4.2 (38d)
CVE-2024-8542medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Aug 1, 2024 Patched in 3.0.3.1 (83d)
CVE-2024-1812high · 7.2Server-Side Request Forgery (SSRF)

Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url

Mar 15, 2024 Patched in 2.0.8 (26d)
CVE-2023-51695medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Dec 27, 2023 Patched in 2.0.5 (27d)
CVE-2023-51377medium · 5.3Missing Authorization

Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms

Dec 26, 2023 Patched in 2.0.3.1 (28d)
CVE-2021-24907medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting

Nov 22, 2021 Patched in 1.8.0 (792d)
CVE-2019-13575critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection

Jul 18, 2019 Patched in 1.5.0 (1650d)
Version History

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Release Timeline

v3.4.5Current
v3.4.41 CVE
CVE-2026-5478
v3.4.32 CVEs
CVE-2026-3296 CVE-2026-5478
v3.4.2.12 CVEs185 files changed
CVE-2026-3296 CVE-2026-5478
v3.4.22 CVEs
CVE-2026-3296 CVE-2026-5478
v3.4.13 CVEs9 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.4.03 CVEs46 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.3.03 CVEs37 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.63 CVEs56 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.53 CVEs8 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.43 CVEs2 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.33 CVEs58 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.23 CVEs25 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.13 CVEs6 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.2.03 CVEs101 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.1.23 CVEs37 files changed
CVE-2026-3296 CVE-2026-5478 CVE-2026-22422
v3.1.16 CVEs30 files changed
CVE-2025-3439 CVE-2026-3296 CVE-2025-3422 +3 more
v3.1.06 CVEs
CVE-2025-3439 CVE-2026-3296 CVE-2025-3422 +3 more
v3.0.9.56 CVEs5 files changed
CVE-2025-3439 CVE-2026-3296 CVE-2025-3422 +3 more
v3.0.9.47 CVEs7 files changed
CVE-2025-3439 CVE-2026-3296 CVE-2025-3422 +4 more
Code Analysis
Analyzed Mar 16, 2026

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Code Analysis

Dangerous Functions
2
Raw SQL Queries
22
81 prepared
Unescaped Output
221
2736 escaped
Nonce Checks
66
Capability Checks
125
File Operations
38
External Requests
12
Bundled Libraries
1

Dangerous Functions Found

unserialize$raw_meta_val = unserialize( $meta_value ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.seincludes\admin\views\html-admin-page-entries-view.php:133
unserializereturn @unserialize(trim($data), $options); //phpcs:ignore.includes\evf-core-functions.php:5600

Bundled Libraries

Select2

SQL Query Safety

79% prepared103 total queries

Output Escaping

93% escaped2957 total outputs
Data Flows · Security
11 unsanitized

Data Flow Analysis

25 flows11 with unsanitized paths
upload_file (includes\abstracts\class-evf-form-fields-upload.php:178)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_save_templateaddons\StyleCustomizer\includes\class-evf-style-customizer-ajax.php:22
authwp_ajax_delete_templateaddons\StyleCustomizer\includes\class-evf-style-customizer-ajax.php:23
authwp_ajax_save_custom_color_paletteaddons\StyleCustomizer\includes\class-evf-style-customizer-ajax.php:24
WordPress Hooks 261
actioninitaddons\Addons.php:35
actioninitaddons\Addons.php:36
filtereverest_forms_integrationsaddons\Addons.php:37
actionadmin_noticesaddons\BeaverBuilder\Helper.php:51
actionwp_enqueue_scriptsaddons\BricksBuilder\BricksBuilder.php:48
actioninitaddons\BricksBuilder\BricksBuilder.php:50
actionadmin_noticesaddons\BricksBuilder\Helper.php:44
actioneverest_forms_inline_cleantalk_settingsaddons\CleanTalk\Builder\Builder.php:24
actionadmin_enqueue_scriptsaddons\CleanTalk\CleanTalk.php:43
actionet_builder_readyaddons\DiviBuilder\DiviBuilder.php:45
actionwp_enqueue_scriptsaddons\DiviBuilder\EverestFormsModule.php:58
actionadmin_noticesaddons\DiviBuilder\Helper.php:46
actionadmin_noticesaddons\OxygenBuilder\Helper.php:49
actionoxygen_add_plus_sectionsaddons\OxygenBuilder\OxygenBuilder.php:48
actionoxygen_add_plus_everest-forms_section_contentaddons\OxygenBuilder\OxygenBuilder.php:49
actionadmin_enqueue_scriptsaddons\StyleCustomizer\includes\class-everest-forms-style-customizer.php:36
actioneverest_forms_shortcode_scriptsaddons\StyleCustomizer\includes\class-everest-forms-style-customizer.php:37
actioneverest_forms_builder_content_fieldsaddons\StyleCustomizer\includes\class-everest-forms-style-customizer.php:38
actioneverest_form_elemntor_styleaddons\StyleCustomizer\includes\class-everest-forms-style-customizer.php:40
filtergettextaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:57
actioncustomize_registeraddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:60
filtercustomize_section_activeaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:63
filtercustomize_panel_activeaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:64
filtercustomize_loaded_componentsaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:65
actioncustomize_controls_initaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:68
actioncustomize_preview_initaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:71
actioncustomize_controls_enqueue_scriptsaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:72
actioncustomize_save_afteraddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:75
filtercustomize_save_responseaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:76
actiondeleted_postaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:80
actioneverest_forms_save_formaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:83
actioneverest_forms_import_formaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:84
actioneverest_forms_create_formaddons\StyleCustomizer\includes\class-evf-style-customizer-api.php:85
filtereverest_forms_style_customizer_sectionsaddons\StyleCustomizer\includes\configs\evf-style-customizer-color-palette.php:29
filtereverest_forms_style_customizer_controlsaddons\StyleCustomizer\includes\configs\evf-style-customizer-color-palette.php:271
filtereverest_forms_style_customizer_panelsaddons\StyleCustomizer\includes\configs\evf-style-customizer-form-wrapper-configs.php:30
filtereverest_forms_style_customizer_sectionsaddons\StyleCustomizer\includes\configs\evf-style-customizer-form-wrapper-configs.php:89
filtereverest_forms_style_customizer_controlsaddons\StyleCustomizer\includes\configs\evf-style-customizer-form-wrapper-configs.php:2008
filtereverest_forms_style_customizer_panelsaddons\StyleCustomizer\includes\configs\evf-style-customizer-submission-message-configs.php:29
filtereverest_forms_style_customizer_sectionsaddons\StyleCustomizer\includes\configs\evf-style-customizer-submission-message-configs.php:79
filtereverest_forms_style_customizer_controlsaddons\StyleCustomizer\includes\configs\evf-style-customizer-submission-message-configs.php:291
actionadmin_noticesaddons\WPBakeryBuilder\Helper.php:50
actionvc_before_initaddons\WPBakeryBuilder\WPBakeryBuilder.php:45
actionadmin_noticeseverest-forms.php:54
filterthemegrill_sdk_ran_promoseverest-forms.php:100
filterthemegrill_sdk_hide_dashboard_widgeteverest-forms.php:101
filterthemegrill_sdk_productseverest-forms.php:106
actioneverest_forms_shortcode_scriptsincludes\abstracts\class-evf-form-fields-upload.php:37
filtereverest_forms_html_field_valueincludes\abstracts\class-evf-form-fields-upload.php:38
filtereverest_forms_plaintext_field_valueincludes\abstracts\class-evf-form-fields-upload.php:39
filtereverest_forms_email_file_attachmentsincludes\abstracts\class-evf-form-fields-upload.php:41
filtereverest_forms_email_file_attachmentsincludes\abstracts\class-evf-form-fields-upload.php:42
actioneverest_forms_remove_attachments_after_send_emailincludes\abstracts\class-evf-form-fields-upload.php:43
actioneverest_forms_woocommerce_jsincludes\abstracts\class-evf-form-fields-upload.php:44
filtereverest_forms_field_propertiesincludes\abstracts\class-evf-form-fields.php:133
actionadmin_enqueue_scriptsincludes\abstracts\legacy\class-evf-admin-form-panel.php:87
actioneverest_forms_builder_tabsincludes\abstracts\legacy\class-evf-admin-form-panel.php:88
actioneverest_forms_builder_outputincludes\abstracts\legacy\class-evf-admin-form-panel.php:89
actioneverest_forms_builder_fieldsincludes\admin\builder\class-evf-builder-fields.php:49
actioneverest_forms_builder_fields_optionsincludes\admin\builder\class-evf-builder-fields.php:50
actioneverest_forms_builder_fields_previewincludes\admin\builder\class-evf-builder-fields.php:51
filtereverest_forms_builder_tabs_arrayincludes\admin\builder\class-evf-builder-page.php:69
actioneverest_forms_settings_connections_emailincludes\admin\builder\class-evf-builder-settings.php:33
filtereverest_forms_builder_settings_sectionincludes\admin\builder\class-evf-builder-settings.php:35
actioneverest_forms_settings_panel_contentincludes\admin\builder\class-evf-builder-settings.php:36
actionadmin_enqueue_scriptsincludes\admin\class-evf-admin-assets.php:24
actionadmin_enqueue_scriptsincludes\admin\class-evf-admin-assets.php:25
actionadmin_enqueue_scriptsincludes\admin\class-evf-admin-assets.php:26
actionmedia_buttonsincludes\admin\class-evf-admin-editor.php:24
actionadmin_footerincludes\admin\class-evf-admin-editor.php:49
filterdefault_titleincludes\admin\class-evf-admin-embed-wizard.php:24
filterdefault_contentincludes\admin\class-evf-admin-embed-wizard.php:25
actionadmin_initincludes\admin\class-evf-admin-entries.php:20
filterheartbeat_receivedincludes\admin\class-evf-admin-entries.php:21
actioneverest_forms_after_delete_entriesincludes\admin\class-evf-admin-entries.php:22
actionadmin_initincludes\admin\class-evf-admin-forms.php:20
actiondeleted_postincludes\admin\class-evf-admin-forms.php:21
filterwp_untrash_post_statusincludes\admin\class-evf-admin-forms.php:22
actiontrashed_postincludes\admin\class-evf-admin-forms.php:23
actionadmin_initincludes\admin\class-evf-admin-import-export.php:20
actionadmin_menuincludes\admin\class-evf-admin-menus.php:26
actionadmin_menuincludes\admin\class-evf-admin-menus.php:27
actionadmin_menuincludes\admin\class-evf-admin-menus.php:28
actionadmin_menuincludes\admin\class-evf-admin-menus.php:29
actionadmin_menuincludes\admin\class-evf-admin-menus.php:30
actionadmin_menuincludes\admin\class-evf-admin-menus.php:31
actionadmin_menuincludes\admin\class-evf-admin-menus.php:32
actionadmin_bar_menuincludes\admin\class-evf-admin-menus.php:34
actionadmin_menuincludes\admin\class-evf-admin-menus.php:37
actionadmin_menuincludes\admin\class-evf-admin-menus.php:41
actionadmin_headincludes\admin\class-evf-admin-menus.php:44
actionadmin_headincludes\admin\class-evf-admin-menus.php:45
actionadmin_headincludes\admin\class-evf-admin-menus.php:46
filtercustom_menu_orderincludes\admin\class-evf-admin-menus.php:47
filterset-screen-optionincludes\admin\class-evf-admin-menus.php:48
actionswitch_themeincludes\admin\class-evf-admin-notices.php:43
actioneverest_forms_installedincludes\admin\class-evf-admin-notices.php:44
actionwp_loadedincludes\admin\class-evf-admin-notices.php:45
actionshutdownincludes\admin\class-evf-admin-notices.php:46
actionadmin_print_stylesincludes\admin\class-evf-admin-notices.php:49
actionin_admin_headerincludes\admin\class-evf-admin-notices.php:50
actionadmin_noticesincludes\admin\class-evf-admin-notices.php:172
actionadmin_noticesincludes\admin\class-evf-admin-notices.php:174
actioneverest_forms_preview_confirmationincludes\admin\class-evf-admin-preview-confirmation.php:24
filtereverest_forms_notice_typesincludes\admin\class-evf-admin-preview-confirmation.php:25
actionadmin_menuincludes\admin\class-evf-admin-welcome.php:26
actionadmin_headincludes\admin\class-evf-admin-welcome.php:27
actioninitincludes\admin\class-evf-admin.php:20
actionadmin_initincludes\admin\class-evf-admin.php:21
actionadmin_initincludes\admin\class-evf-admin.php:22
actionadmin_initincludes\admin\class-evf-admin.php:23
actionadmin_initincludes\admin\class-evf-admin.php:24
actionadmin_footerincludes\admin\class-evf-admin.php:25
filteradmin_body_classincludes\admin\class-evf-admin.php:26
filteradmin_footer_textincludes\admin\class-evf-admin.php:27
filterupdate_footerincludes\admin\class-evf-admin.php:189
actionadmin_initincludes\admin\evf-admin-functions.php:627
actionadmin_noticesincludes\admin\evf-admin-functions.php:639
actionadmin_noticesincludes\admin\form-migrator\abstract-evf-form-migrator.php:49
filtereverest_forms_settings_tabs_arrayincludes\admin\settings\class-evf-settings-page.php:36
filtereverest_forms_frontend_container_classincludes\blocks\block-types\class-evf-blocks-form-selector.php:59
actioneverest_forms_frontend_outputincludes\blocks\block-types\class-evf-blocks-form-selector.php:67
actioneverest_forms_frontend_outputincludes\blocks\block-types\class-evf-blocks-form-selector.php:74
filterblock_categories_allincludes\blocks\class-evf-blocks.php:28
actioninitincludes\blocks\class-evf-blocks.php:29
actionenqueue_block_editor_assetsincludes\blocks\class-evf-blocks.php:30
actionplugins_loadedincludes\class-everest-forms.php:168
actionafter_setup_themeincludes\class-everest-forms.php:181
actioninitincludes\class-everest-forms.php:182
actioninitincludes\class-everest-forms.php:183
actioninitincludes\class-everest-forms.php:184
actionswitch_blogincludes\class-everest-forms.php:185
filtereverest_forms_entry_bulk_actionsincludes\class-everest-forms.php:186
actioninitincludes\class-everest-forms.php:187
actioninitincludes\class-evf-ajax.php:31
actiontemplate_redirectincludes\class-evf-ajax.php:32
actioninitincludes\class-evf-ajax.php:34
actionadmin_noticesincludes\class-evf-cache-helper.php:21
filtercron_schedulesincludes\class-evf-cron.php:25
actioninitincludes\class-evf-cron.php:26
actioneverest_forms_email_send_beforeincludes\class-evf-emails.php:120
actioneverest_forms_email_send_afterincludes\class-evf-emails.php:121
filterwp_mail_fromincludes\class-evf-emails.php:401
filterwp_mail_from_nameincludes\class-evf-emails.php:402
filterwp_mail_content_typeincludes\class-evf-emails.php:403
actionwpincludes\class-evf-form-task.php:75
filtereverest_forms_field_propertiesincludes\class-evf-form-task.php:76
actioneverest_forms_complete_entry_saveincludes\class-evf-form-task.php:77
actioneverest_forms_complete_entry_saveincludes\class-evf-form-task.php:78
actionadmin_initincludes\class-evf-form-task.php:79
actionadmin_initincludes\class-evf-form-task.php:80
actionadmin_initincludes\class-evf-form-task.php:81
actionadmin_initincludes\class-evf-form-task.php:82
actionbefore_delete_postincludes\class-evf-form-task.php:88
actioneverest_forms_before_delete_entriesincludes\class-evf-form-task.php:89
filtereverest_forms_successincludes\class-evf-form-task.php:643
filterwp_redirectincludes\class-evf-form-task.php:868
filtereverest_forms_success_notice_classincludes\class-evf-form-task.php:1090
filtereverest_forms_fieldsincludes\class-evf-forms-features.php:20
actionwp_enqueue_scriptsincludes\class-evf-frontend-scripts.php:42
actionwp_print_scriptsincludes\class-evf-frontend-scripts.php:43
actionwp_print_footer_scriptsincludes\class-evf-frontend-scripts.php:44
actioninitincludes\class-evf-install.php:87
actioninitincludes\class-evf-install.php:88
actionadmin_initincludes\class-evf-install.php:89
filtermap_meta_capincludes\class-evf-install.php:90
filterplugin_row_metaincludes\class-evf-install.php:94
filterwpmu_drop_tablesincludes\class-evf-install.php:95
filtercron_schedulesincludes\class-evf-install.php:96
actioninitincludes\class-evf-post-types.php:29
actioninitincludes\class-evf-post-types.php:30
actionadmin_bar_menuincludes\class-evf-post-types.php:31
actioneverest_forms_after_register_post_typeincludes\class-evf-post-types.php:32
actioneverest_forms_flush_rewrite_rulesincludes\class-evf-post-types.php:33
actionadmin_initincludes\class-evf-privacy.php:20
actioninitincludes\class-evf-reporting.php:22
actioneverest_forms_settings_savedincludes\class-evf-reporting.php:23
actioneverest_forms_stats_report_scheduleincludes\class-evf-reporting.php:24
actionshutdownincludes\class-evf-session-handler.php:84
actionwp_logoutincludes\class-evf-session-handler.php:85
filternonce_user_logged_outincludes\class-evf-session-handler.php:88
filtereverest_forms_process_smart_tagsincludes\class-evf-smart-tags.php:19
actionpre_get_postsincludes\class-evf-template-loader.php:37
filteredit_post_linkincludes\class-evf-template-loader.php:38
filterhome_template_hierarchyincludes\class-evf-template-loader.php:39
filterfrontpage_template_hierarchyincludes\class-evf-template-loader.php:40
actiontemplate_redirectincludes\class-evf-template-loader.php:41
filterastra_remove_entry_header_contentincludes\class-evf-template-loader.php:42
filtertemplate_includeincludes\class-evf-template-loader.php:44
filtertemplate_includeincludes\class-evf-template-loader.php:46
filtertemplate_includeincludes\class-evf-template-loader.php:172
actioninitincludes\class-evf-template-loader.php:416
actionelementor/widgets/registerincludes\elementor\class-evf-elementor.php:37
actionelementor/elements/categories_registeredincludes\elementor\class-evf-elementor.php:38
actionelementor/editor/after_enqueue_stylesincludes\elementor\class-evf-elementor.php:39
filtereverest_forms_register_log_handlersincludes\evf-core-functions.php:664
filterplugin_localeincludes\evf-core-functions.php:723
filterextra_theme_headersincludes\evf-core-functions.php:795
filterextra_plugin_headersincludes\evf-core-functions.php:796
actioneverest_forms_installedincludes\evf-core-functions.php:830
actioneverest_forms_cleanup_sessionsincludes\evf-core-functions.php:883
actionadmin_initincludes\evf-core-functions.php:1664
filtereverest_forms_email_messageincludes\evf-core-functions.php:1710
actioneverest_forms_cleanup_logsincludes\evf-core-functions.php:4259
actionwp_mail_failedincludes\evf-core-functions.php:5447
filtereverest_forms_email_send_failed_messageincludes\evf-core-functions.php:5474
actionadmin_headincludes\evf-core-functions.php:5511
actioneverest_forms_display_fields_beforeincludes\evf-notice-functions.php:157
actionwp_footerincludes\evf-template-functions.php:24
filterbody_classincludes\evf-template-hooks.php:13
filterget_the_generator_htmlincludes\evf-template-hooks.php:20
filterget_the_generator_xhtmlincludes\evf-template-hooks.php:21
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-checkbox.php:78
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-country.php:54
filtereverest_forms_plaintext_field_valueincludes\fields\class-evf-field-country.php:55
actioneverest_forms_shortcode_scriptsincludes\fields\class-evf-field-date-time.php:55
filtereverest_forms_entry_save_fieldsincludes\fields\class-evf-field-date-time.php:57
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-date-time.php:58
filtereverest_forms_date_time_propertiesincludes\fields\class-evf-field-date-time.php:59
filtereverest_forms_field_new_requiredincludes\fields\class-evf-field-email.php:61
filtereverest_forms_builder_field_option_classincludes\fields\class-evf-field-email.php:62
filtereverest_forms_entry_save_fieldsincludes\fields\class-evf-field-likert.php:79
filtereverest_forms_field_new_defaultincludes\fields\class-evf-field-likert.php:80
filtereverest_forms_format_csv_field_dataincludes\fields\class-evf-field-likert.php:81
filtereverest_forms_entries_field_editableincludes\fields\class-evf-field-likert.php:83
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-privacy-policy.php:54
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-radio.php:76
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-rating.php:55
filtereverest_forms_entries_field_editableincludes\fields\class-evf-field-scale-rating.php:57
actioneverest_forms_shortcode_scriptsincludes\fields\class-evf-field-select.php:73
actioneverest_forms_shortcode_scriptsincludes\fields\class-evf-field-text.php:59
actioneverest_forms_shortcode_scriptsincludes\fields\class-evf-field-textarea.php:61
filtereverest_forms_html_field_valueincludes\fields\class-evf-field-wysiwyg.php:54
filtereverest_forms_entry_single_dataincludes\fields\class-evf-field-wysiwyg.php:55
filtereverest_forms_entries_field_editableincludes\fields\class-evf-field-yes-no.php:60
actionplugins_loadedincludes\log-handlers\class-evf-log-handler-file.php:52
actionrest_api_initincludes\RestApi\class-evf-rest-api.php:48
actionrest_api_initincludes\RestApi\controllers\version1\class-evf-site-assistant.php:36
filteramp_skip_postincludes\shortcodes\class-evf-shortcode-form.php:38
actioneverest_forms_frontend_output_successincludes\shortcodes\class-evf-shortcode-form.php:39
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:40
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:41
actioneverest_forms_display_field_beforeincludes\shortcodes\class-evf-shortcode-form.php:42
actioneverest_forms_display_field_beforeincludes\shortcodes\class-evf-shortcode-form.php:43
actioneverest_forms_display_field_beforeincludes\shortcodes\class-evf-shortcode-form.php:44
actioneverest_forms_display_field_afterincludes\shortcodes\class-evf-shortcode-form.php:45
actioneverest_forms_display_field_afterincludes\shortcodes\class-evf-shortcode-form.php:46
actioneverest_forms_display_field_afterincludes\shortcodes\class-evf-shortcode-form.php:47
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:48
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:49
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:51
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:53
actioneverest_forms_frontend_outputincludes\shortcodes\class-evf-shortcode-form.php:54
filtereverest_forms_frontend_recaptcha_urlincludes\shortcodes\class-evf-shortcode-form.php:57
filtereverest_forms_display_fields_beforeincludes\shortcodes\class-evf-shortcode-form.php:60
actionwp_footerincludes\shortcodes\class-evf-shortcode-form.php:1462
filtereverest_forms_logger_dataincludes\stats\class-evf-stats.php:28
filterpre_option_everest_forms_sdk_enable_loggerincludes\stats\class-evf-stats.php:30
actionupdate_option_everest_forms_sdk_enable_loggerincludes\stats\class-evf-stats.php:37
actionupdate_option_everest_forms_allow_usage_trackingincludes\stats\class-evf-stats.php:49
actioneverest_forms_biweekly_scheduled_eventsincludes\stats\class-evf-stats.php:220

Scheduled Events 4

everest_forms_biweekly_scheduled_events
everest_forms_cleanup_logs
everest_forms_cleanup_sessions
everest_forms_stats_report_schedule
Maintenance & Trust

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 16, 2026
PHP min version7.2
Downloads7.4M

Community Trust

Rating98/100
Number of ratings370
Active installs100K
Alternatives

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Alternatives

WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More

WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More

wpforms-lite

A
88

The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.

6.0M 16 CVEs
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

fluentform

B
82

Get a fast contact form plugin. Create advanced forms using drag and drop form builder with all smart features.

700K 33 CVEs
SureForms – Contact Form, Payment Form & Other Custom Form Builder

SureForms – Contact Form, Payment Form & Other Custom Form Builder

sureforms

A
88

The most beginner-friendly AI Form Builder for WordPress. Create contact, payment, quiz & custom forms with advanced features in minutes.

500K 16 CVEs
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

formidable

B
76

The most advanced WordPress forms plugin. Go beyond contact forms with our drag and drop form builder for surveys, quizzes, and more.

300K 23 CVEs
Ultra Addons for Contact Form 7

Ultra Addons for Contact Form 7

ultimate-addons-for-contact-form-7

B
82

50+ Essential Addons for Contact Form 7 - Conditional Fields, Multi Step, Redirection, Columns, WooCommerce, Mailchimp & more

60K 14 CVEs
Developer Profile

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Developer Profile

wpeverest

5 plugins · 161K total installs

67
trust score
Avg Security Score
83/100
Avg Patch Time
134 days
View full developer profile
Detection Fingerprints

How We Detect Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/everest-forms/assets/css/admin/backward.css/wp-content/plugins/everest-forms/assets/css/admin/admin.css/wp-content/plugins/everest-forms/assets/js/admin/admin.js/wp-content/plugins/everest-forms/assets/js/admin/admin.min.js/wp-content/plugins/everest-forms/assets/css/menu.css
Script Paths
/wp-content/plugins/everest-forms/addons/CleanTalk/assets/js/admin/admin.js/wp-content/plugins/everest-forms/addons/CleanTalk/assets/js/admin/admin.min.js
Version Parameters
everest-forms/assets/css/admin/backward.css?ver=everest-forms/addons/CleanTalk/assets/css/admin/admin.css?ver=everest-forms/addons/CleanTalk/assets/js/admin/admin.js?ver=everest-forms/assets/css/menu.css?ver=

HTML / DOM Fingerprints

CSS Classes
everest-forms-clean-talk-form-containerclean-talk-form-groupeverest-forms-clean-talk-error-message-containereverest-forms-clean-talk-access-key-titleeverest-forms-clean-talk-access-keyeverest-forms-clean-talk-note
Data Attributes
everest_forms_clean_talk
JS Globals
everest_forms_clean_talk
FAQ

Frequently Asked Questions about Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder