Skip to content
PluginCanary

Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

by wpeverest · 90,000+ active installs · Checked 3 Nov 2026
Healthy7 Warnings

Healthy: vulnerability published 28 Oct 2026, fixed in 3.6.3.

81/ 100 Canary Score
Sub-scores for Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 3.6.3. Update to version 3.6.3 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 3.6.3. Update to version 3.6.3 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 3.6.2. Update to version 3.6.2 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 3.6.2. Update to version 3.6.2 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 3.6.1. Update to version 3.6.1 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 27 Aug 2026, fixed in 3.4.5. Update to version 3.4.5 or later.27 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 15 Aug 2026, fixed in 3.5.3. Update to version 3.5.3 or later.15 Aug 2026Evidence
  • InfoSEC-320 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpeverest2 Feb 2018 to 26 Oct 2026, 56 commits
everestforms6 Nov 2019 to 26 Oct 2026, 152 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
20 days ago
Releases, 24 months
43
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Q1 20243
Q2 20243
Q3 20244
Q4 20249
Q1 20259
Q2 20259
Q3 20253
Q4 20250
Q1 20264
Q2 20266
Q3 20265
Q4 20261

Last release 15 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter6.1<= 3.6.23.6.30
28 Oct 2026Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})5.3<= 3.6.23.6.30
13 Oct 2026Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.6.13.6.20
2 Oct 2026Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Reflected Cross-Site Scripting6.1<= 3.6.13.6.20
11 Sep 2026Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.0 - Unauthenticated PHP Object Injection8.1<= 3.6.03.6.10
27 Aug 2026Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'5.3<= 3.4.43.4.50
15 Aug 2026Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints4.3<= 3.5.23.5.30
25 Jun 2026Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting6.1<= 3.4.83.5.00
18 Jun 2026Everest Forms <= 3.4.0 - Unauthenticated Information Exposure5.3<= 3.4.03.5.00
18 Jun 2026Everest Forms <= 3.4.0 - Unauthenticated Missing Authorization5.3<= 3.4.03.5.00
27 May 2026Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending4.3<= 3.4.73.4.80
20 Apr 2026Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter8.1<= 3.4.43.4.50
7 Apr 2026Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata9.8<= 3.4.33.4.40
26 Sep 2025Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution6.5<= 3.4.13.4.2123
10 Apr 2025Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection9.8<= 3.1.13.1.20
10 Apr 2025Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution5.4<= 3.1.13.1.20
10 Apr 2025Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting6.1<= 3.1.13.1.20
17 Feb 2025Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion9.8<= 3.0.9.43.0.9.53
17 Jan 2025Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.0.83.0.8.10
5 Nov 2024Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.0.4.13.0.4.20
1 Aug 2024Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.0.33.0.3.147
15 Mar 2024Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url7.2<= 2.0.72.0.80
27 Dec 2023Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.0.4.12.0.50
26 Dec 2023Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms5.3<= 2.0.32.0.3.10
22 Nov 2021Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting6.1< 1.8.01.8.00

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20264.8
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q4 2024 and Q3 2026.

Rating distribution
5 star354
4 star9
3 star2
2 star2
1 star8

Momentum

90,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
4 May 20264,632
11 May 20266,795
18 May 20266,936
25 May 202637,975
1 Jun 20267,773
8 Jun 20265,126
15 Jun 202663,754
22 Jun 20268,912
29 Jun 202634,147
6 Jul 20269,500
13 Jul 20265,702
20 Jul 20265,162
27 Jul 20264,593
3 Aug 202636,894
10 Aug 202635,698
17 Aug 202610,849
24 Aug 20266,214
31 Aug 20265,107
7 Sep 202636,233
14 Sep 20269,300
21 Sep 202638,267
28 Sep 20267,301
5 Oct 20267,556
12 Oct 202633,269
19 Oct 20269,472
26 Oct 202611,051
2 Nov 20261,127

Weekly downloads over the last 4 weeks are 18% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version3.6.3
Authorwpeverest
Added2 Feb 2018
Last updated15 Oct 2026
Active installs90,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.2
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, survey, custom form, contact form, form builder

Other plugins by this author: User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder, RestaurantPress, PDFDraft - Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer, AI Chatbot, Assistant Generator, Custom Form Builder for Everest Forms, Online Restaurant Reservation, PDFDraft PDF Invoices for WooCommerce

Questions

Is Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI still maintained?

Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI was last updated on 15 Oct 2026. Its Canary status is Healthy.

Is Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI safe?

Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI has no open unpatched vulnerabilities on record. 20 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI?

The wordpress.org author is wpeverest. Recent committers: wpeverest, everestforms, plugin-master. We have recorded no ownership change.

What can I use instead of Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue