Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-04 08:48 UTC
  • Importiert: 2026-09-10 14:39 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: c244c345cd70dd1bb268d4127207b8d8d6e9b8724e8e15b4d692f0a1958622cd
The Hacker News

Inhalt

Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence.

The vulnerabilities in question are -

CVE-2026-14894 (CVSS score: 9.8) - A missing file type validation vulnerability in Super Forms – Drag & Drop Form Builder that allows unauthenticated attackers to upload files of any type, including

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-14894

CRITICAL

9.8

CRITICAL

9.8

2026-07-10

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste