Hackers Exploit Critical Everest Forms Pro Word Press Plugin Flaw to Take Over Sites
Attackers are actively exploiting CVE-2026-3300, a remote code execution flaw with a CVSS score of 9.8 in the Everest Forms Pro WordPress plugin, affecting all versions up to and including 1.9.12; a patch shipped on March 18, 2026 in version 1.9.13....