Critical Everest Forms Pro flaw exploited to take over WordPress sites

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-06 14:09 UTC
  • Importiert: 2026-06-09 06:33 UTC
  • CVSS: 9.8
  • Quelle-ID: bleeping_c
  • uid_hash: 4b4f52881312b0d2d9718c3b2295f83c99a193d9c7f6c2c287c51cc8177d8138

Inhalt

Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-3300

CRITICAL

9.8

CRITICAL

9.8

2026-03-31

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
BleepingComputer

bleeping_c

security_news - de https://www.bleepingcomputer.com/feed/