Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise.
The vulnerability in question is CVE-2026-3300 (CVSS score: 9.8), a remote code execution bug impacting all versions of the plugin up to, and including, 1.9.12. A patch for the flaw was
source https://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.html
Friday, June 5, 2026
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box