Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

84 Quality Score

Active Installs

22/30

With 90,000 active installs it is a mid-tier player, well behind WPForms and Contact Form 7 but still solidly established in the WordPress community.

Update Freshness

25/25

Last updated on 2026-07-02 and scored 100/25, indicating very active and recent development.

User Rating

15/15

A 98/100 rating across 374 reviews shows users are consistently happy with the plugin.

Support Health

8/15

Only 4 support threads exist with a 100% resolution rate, which is excellent but the tiny volume means the track record is not yet fully proven.

WP Compatibility

15/15

Tested up to WordPress 7.0 and requiring PHP 7.2 plus WordPress 5.5, it is broadly compatible with modern hosting environments.

Scores higher than 95% of indexed plugins

About

AI form builder for WordPress. Build contact forms, payment forms, quiz, survey & conversational forms with built-in AI or drag & drop builder.

Active Installs 90k+

Rating ★★★★½ 4.9/5

Last Updated 2026-09-21 5:23am GMT

Requires WordPress 5.5+

Tested Up To 7.0.6

Requires PHP 7.2+

Security History

22 known vulnerabilities, all patched

4 Critical 3 High 15 Medium

Most recent: September 11, 2026

View details ▸

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.0 - Unauthenticated PHP Object Injection High

September 11, 2026 Patched in ["3.6.1"] CVE-2026-62103

Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' Medium

August 27, 2026 Patched in ["3.4.5"] CVE-2026-5096

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints Medium

August 15, 2026 Patched in ["3.5.3"] CVE-2026-13167

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting Medium

June 25, 2026 Patched in ["3.5.0"] CVE-2026-57312

Everest Forms <= 3.4.0 - Unauthenticated Information Exposure Medium

June 18, 2026 Patched in ["3.5.0"] CVE-2026-11571

Everest Forms <= 3.4.0 - Unauthenticated Missing Authorization Medium

June 18, 2026 Patched in ["3.5.0"] CVE-2026-12270

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending Medium

May 27, 2026 Patched in ["3.4.8"] CVE-2026-4888

Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter High

April 20, 2026 Patched in ["3.4.5"] CVE-2026-5478

Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata Critical

April 7, 2026 Patched in ["3.4.4"] CVE-2026-3296

Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution Medium

September 26, 2025 Patched in ["3.4.2"] CVE-2026-22422

Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection Critical

April 10, 2025 Patched in ["3.1.2"] CVE-2025-3439

Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Medium

April 10, 2025 Patched in ["3.1.2"] CVE-2025-3422

Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting Medium

April 10, 2025 Patched in ["3.1.2"] CVE-2025-3421

Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion Critical

February 17, 2025 Patched in ["3.0.9.5"] CVE-2025-1128

Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

January 17, 2025 Patched in ["3.0.8.1"] CVE-2024-13125

Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

November 5, 2024 Patched in ["3.0.4.2"] CVE-2024-10471

Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

August 1, 2024 Patched in ["3.0.3.1"] CVE-2024-8542

Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url High

March 15, 2024 Patched in ["2.0.8"] CVE-2024-1812

Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

December 27, 2023 Patched in ["2.0.5"] CVE-2023-51695

Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms Medium

December 26, 2023 Patched in ["2.0.3.1"] CVE-2023-51377

Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting Medium

November 22, 2021 Patched in ["1.8.0"] CVE-2021-24907

Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection Critical

July 18, 2019 Patched in ["1.5.0"] CVE-2019-13575

What It Does

Everest Forms is a drag and drop form builder for WordPress that creates contact, payment, survey, quiz, and conversational forms, with optional AI assistance for generating fields and layouts. It supports a wide range of add-ons for payments, marketing integrations, and advanced field types.

Who It's For

This plugin suits small to mid-sized businesses, freelancers, and WordPress site owners who want a budget-friendly form solution with AI-assisted building and room to grow into payments, surveys, and quizzes. It is a strong fit for users who want more features than Contact Form 7 but do not need the largest ecosystem.

Who Should Skip It

If you run a high-traffic enterprise site or need the deepest third-party integrations and the most polished UX, you will likely be better served by WPForms or Fluent Forms. Sites that only need a simple contact form with no add-ons may find Everest Forms' feature set overkill.

The Bottom Line

Everest Forms delivers strong ratings, active maintenance, and broad compatibility at a quality score of 84.39/100. It is a sensible mid-market choice for users who want AI-assisted form building without paying for WPForms. The relatively low install count and tiny support volume mean it is a safe pick but not yet a category leader.

Related Plugins

WPForms Lite 97/100

Pick WPForms if you want the largest user base, the most polished UX, and the widest range of official add-ons and integrations.

Contact Form 7 88/100

Pick Contact Form 7 if you only need a free, lightweight, no-frills contact form and do not mind hand-coding shortcodes.

Forminator Forms 94/100

Pick Forminator if you want built-in polls, quizzes, and calculations bundled into the free plugin with no upsells.

Fluent Forms 88/100

Pick Fluent Forms if you prioritize performance, a generous free tier, and strong conditional logic out of the box.

Akismet Anti-spam 99/100

Pick Akismet to add spam filtering on top of any contact form rather than as a form builder alternative.