Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ sandrosg1

   2mo ago

   As an Internet page rookie I highly rely on support from plugin supplier or in this case the developer for this forms and its content tools. My questions were answered in a professional manner and not just scripted responses. If you feel comfortable you might even allow the team to check your webpage remotely to get things done or fixed. For me a great help …

   Read on wp.org ↗
2. ★★★★★ siffsc

   4mo ago

   I’ve been using Everest Forms for over 5 years and can honestly say it is the most important tool I have to manage a fishing club membership roster, take registrations for events, and canvas the membership with occasional surveys. Multi-page forms, conditional logic options, and attaching PDF files to notification e-mails are very useful in administering our organization. The one time I had problems, the support staff was very responsive and solved my problem quickly, even though it was not Everest Forms at fault, but another add-on from a different developer that was causing the problem. Thank you!

   Read on wp.org ↗
3. ★★★★★ alythdt

   4mo ago

   Excellent support from Sanju who politely and patiently pointed out the rookie error I had made resulting in the plugin not doing what I expected it to do. Thanks very much for the help!

   Read on wp.org ↗
4. ★★★★★ soupia18

   4mo ago

   I selected Everest Forms among many others available form plugins as it’s an effective and solid plugin for creating various types of forms. It serves my needs well and the team behind it, is always prompt when it comes to support requests. This topic was modified 2 months, 3 weeks ago by soupia18.

   Read on wp.org ↗
5. ★★★★★ benoitfouc

   5mo ago

   I had some issue with the plugin and Elementor, and the premium support help me good !

   Read on wp.org ↗
6. ★★★★★ paulmaria

   5mo ago

   I’ve been using <span class=”hover:entity-accent entity-underline inline cursor-pointer align-baseline”>Everest Forms</span> for a while now, and it’s honestly one of the easiest form plugins I’ve tried. The drag-and-drop builder is smooth, and creating forms doesn’t feel complicated at all. It works well for basic to medium-level needs.

   Read on wp.org ↗
7. ★★★★★ gsheld

   6mo ago

   Excellent contact form plugin. Lightweight, clean styling, and reliable delivery when paired with SMTP.

   Read on wp.org ↗
8. ★★★★★ dtownweb

   6mo ago

   I needed a form plugin that could integrate with Dropbox for file attachments. Everest forms works great, and the few times I have reached out for support, the Everest team has been responsive and very helpful.

   Read on wp.org ↗

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints ↗
   2026-08-15 CVE-2026-13167 Missing Authorization Affects <= 3.5.2 Patched in 3.5.3
2. Medium · 6.1 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting ↗
   2026-06-25 CVE-2026-57312 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.8 Patched in 3.5.0
3. Medium · 5.3 Everest Forms <= 3.4.0 - Unauthenticated Information Exposure ↗
   2026-06-18 CVE-2026-11571 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.4.0 Patched in 3.5.0
4. Medium · 5.3 Everest Forms <= 3.4.0 - Unauthenticated Missing Authorization ↗
   2026-06-18 CVE-2026-12270 Missing Authorization Affects <= 3.4.0 Patched in 3.5.0
5. Medium · 4.3 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending ↗
   2026-05-27 CVE-2026-4888 Missing Authorization Affects <= 3.4.7 Patched in 3.4.8
6. High · 8.1 Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter ↗
   2026-04-20 CVE-2026-5478 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.4.4 Patched in 3.4.5
7. Critical · 9.8 Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata ↗
   2026-04-07 CVE-2026-3296 Deserialization of Untrusted Data Affects <= 3.4.3 Patched in 3.4.4
8. Medium · 6.5 Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution ↗
   2025-09-26 CVE-2026-22422 Improper Control of Generation of Code ('Code Injection') Affects <= 3.4.1 Patched in 3.4.2
9. Critical · 9.8 Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection ↗
   2025-04-10 CVE-2025-3439 Deserialization of Untrusted Data Affects <= 3.1.1 Patched in 3.1.2
10. Medium · 5.4 Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution ↗
    2025-04-10 CVE-2025-3422 Improper Control of Generation of Code ('Code Injection') Affects <= 3.1.1 Patched in 3.1.2
11. Medium · 6.1 Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting ↗
    2025-04-10 CVE-2025-3421 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.1 Patched in 3.1.2
12. Critical · 9.8 Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion ↗
    2025-02-17 CVE-2025-1128 Unrestricted Upload of File with Dangerous Type Affects <= 3.0.9.4 Patched in 3.0.9.5
13. Medium · 4.4 Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-01-17 CVE-2024-13125 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.8 Patched in 3.0.8.1
14. Medium · 4.4 Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-11-05 CVE-2024-10471 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.4.1 Patched in 3.0.4.2
15. Medium · 4.4 Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-08-01 CVE-2024-8542 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.3 Patched in 3.0.3.1
16. High · 7.2 Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url ↗
    2024-03-15 CVE-2024-1812 Server-Side Request Forgery (SSRF) Affects <= 2.0.7 Patched in 2.0.8
17. Medium · 4.4 Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-12-27 CVE-2023-51695 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.4.1 Patched in 2.0.5
18. Medium · 5.3 Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms ↗
    2023-12-26 CVE-2023-51377 Missing Authorization Affects <= 2.0.3 Patched in 2.0.3.1
19. Medium · 6.1 Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting ↗
    2021-11-22 CVE-2021-24907 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.8.0 Patched in 1.8.0
20. Critical · 9.8 Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection ↗
    2019-07-18 CVE-2019-13575 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.5.0 Patched in 1.5.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 21 languages, 3 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-19 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 4 shared tags A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 4 shared tags A
• Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 300K+ installs · 4.8★ · 4 shared tags A
• Ultra Addons for Contact Form 7 60K+ installs · 4.7★ · 4 shared tags A
• Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 20K+ installs · 4.2★ · 4 shared tags A
• Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms 20K+ installs · 4.4★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI into a readme, a review or a deck. It updates itself.

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI: 90K+ active installs, 4.9★ (375 reviews). Plugin Pulse (WP Mayor), as of 2026-08-26. https://plugins.wpmayor.com/plugin/everest-forms