Critical #EverestFormsPro flaw exploited to take over #WordPress sites

https://www.bleepingcomputer.com/news/security/critical-everest-forms-pro-flaw-exploited-to-take-over-wordpress-sites/

#cybersecurity

URGENT: A critical Remote Code Execution (RCE) vulnerability in Everest Forms Pro (CVE-2026-3300) is under active, widespread exploitation. Despite a patch released in March, attackers are still leveraging an `eval()` flaw to execute arbitrary PHP code and take over WordPress sites. Wordfence reports blocking tens of thousands of attempts. Ensure your Everest Forms Pro is updated to…

https://www.tpp.blog/1041tzr

#cybersecurity #everestformspro #wordpress

🤖 This post was AI-generated.

Hackers Exploit Everest Forms Pro Flaw to Hijack WordPress Sites

More than 29,300 attempted hacks have been blocked by Wordfence, revealing a surge in automated attacks exploiting a critical flaw in the Everest Forms Pro plugin, tracked as CVE-2026-3300. This alarming number highlights the urgent need for WordPress site owners to safeguard against this vulnerability.

https://osintsights.com/hackers-exploit-everest-forms-pro-flaw-to-hijack-wordpress-sites?utm_source=mastodon&utm_medium=social

#Cve20263300 #Wordpress #EverestFormsPro #PluginVulnerability #MalwareOperations

Hackers Exploit Everest Forms Pro Flaw to Compromise WordPress Sites

A critical vulnerability in Everest Forms Pro, affecting over 4,000 active WordPress installations, has been exploited by hackers to gain remote code execution, allowing them to take control of sites without authorization. A patch has been released, but sites remain at risk if not updated to version 1.9.13 or later.

https://osintsights.com/hackers-exploit-everest-forms-pro-flaw-to-compromise-wordpress-sites?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Cve20263300 #EverestFormsPro #Wordpress #PluginVulnerability

Everest Forms Pro Flaw Exploited for Remote Code Execution

A critical flaw in the Everest Forms Pro WordPress plugin, CVE-2026-3300, has been exploited over 29,300 times, allowing attackers to execute remote code on vulnerable sites. This vulnerability was caused by a simple calculation feature that was not properly sanitized, leaving sites open to unauthenticated attacks.

https://osintsights.com/everest-forms-pro-flaw-exploited-for-remote-code-execution?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Cve20263300 #Wordpress #EverestFormsPro #PluginVulnerability