Critical Everest Forms Pro flaw exploited to take over WordPress sites
2026-06-07T07:23:27Z•3a48ad401e019cdb5604b4fa3757134f7308894e266ae46c04d6ec404ee3ad2d
CVE-2026-20245CVE-2026-3300active-exploitationagentpsdbrickstormciscocredential-phishingcryptominerdata-breachdentaquest','wfp','atg-systems-exposedeverest-formshola-browserironwormmagecartnpmplenetpolyfill-login-promptssd-wanserv-usolarwindsstripe-abusesupply-chainunc5221wordpresszero-day
What happened
Feed of BleepingComputer articles describing multiple active and high-impact threats: a critical Everest Forms Pro WordPress plugin vulnerability (CVE-2026-3300) is being actively exploited for full site takeover; an unpatched Cisco Catalyst SD‑WAN Manager zero-day (CVE-2026-20245) is being used for root escalation; and CISA warns of active exploitation of a recently patched SolarWinds Serv‑U flaw to crash servers. Additional incidents include supply‑chain compromises (npm IronWorm, Hola Browser installer delivering a cryptominer), Magecart credit‑card skimming abusing Stripe, large data‑brech
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 3a48ad401e019cdb5604b4fa3757134f7308894e266ae46c04d6ec404ee3ad2d
- Enrichment time
- 2026-06-07T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.