Attackers Actively Exploiting Critical Vulnerability in Everest Forms Pro Plugin

On March 30th, 2026, we publicly disclosed a critical Remote Code Execution vulnerability in Everest Forms Pro, a WordPress plugin with an estimated 4,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to execute arbitrary PHP code on the server, leading to...

CVE-2026-3300

creationtimestamp| type| source ---|---|--- 2026-03-31 02:21:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mid4jgk2ha2p 2026-03-31 02:21:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mid4jw62js2r 2026-03-31 03:00:30+00:00| seen|...