SECURITYJun 5 · 08:38 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Threat actors are exploiting a critical remote code execution vulnerability (CVE-2026-3300) in Everest Forms Pro, a WordPress plugin with 4,000 active installations, leading to site compromises. The vulnerability affects all versions up to 1.9.12.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Everest Forms ProorganizationCVE-2026-3300topicremote code executiontopicWordPressorganizationthreat actorsorganization

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 5 · 11:56 UTC
MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks
SECURITYMay 26 · 11:49 UTC
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
SECURITYMay 7 · 17:55 UTC
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
SECURITYApr 21 · 15:29 UTC
Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk
SECURITYApr 28 · 18:19 UTC
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
SECURITYJun 4 · 07:19 UTC
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog