Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-05 08:38 UTC
  • Importiert: 2026-06-12 09:06 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: f1fa90d999b9b3bf4668fa22badc308c74c1a8c00ebd13d6739600eb9895201f
The Hacker News

Inhalt

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise.

The vulnerability in question is CVE-2026-3300 (CVSS score: 9.8), a remote code execution bug impacting all versions of the plugin up to, and including, 1.9.12. A patch for the flaw was

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-3300

CRITICAL

9.8

CRITICAL

9.8

2026-03-31

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste