SECURITYJun 6 · 14:09 UTCBLEEPING COMPUTERBill Toulas

Critical Everest Forms Pro flaw exploited to take over WordPress sites

Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, allowing them to take complete control of WordPress websites.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Everest Forms ProorganizationCVE-2026-3300topicWordPressorganization

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 30 · 19:36 UTC
Hackers are actively exploiting a bug in cPanel, used by millions of websites
SECURITYMay 14 · 21:07 UTC
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
SECURITYMay 4 · 18:02 UTC
Hackers are still exploiting the cPanel bug to gain control of thousands of websites
SECURITYJun 5 · 08:38 UTC
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
SECURITYMay 2 · 21:54 UTC
Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks
SECURITYJun 2 · 22:12 UTC
Critical Kirki flaw exploited to hijack WordPress admin accounts