Critical Everest Forms Pro flaw exploited to take over WordPress sites
2026-06-06T19:23:32Z•99ecb7a5538805b04213c40c5712cc8709d8a2b53236e119a96daa2c148b0620
AgentPSDBrickstormCISACVE-2026-20245CVE-2026-3300Cisco Catalyst SD-WANDentaQuest breachEverest Forms ProHola BrowserIronWormMagecartPlenetSolarWinds Serv-UStripeToshiba','MujiUN WFP breachUNC5221WordPressautomatic tank gauge (ATG) systemscredential theftcryptominernpmpolyfill login promptssupply-chainzero-day
What happened
Multiple actively exploited and high-impact incidents across web platforms, supply chains, infrastructure, and enterprise products. Notable items: a critical, actively exploited WordPress plugin flaw in Everest Forms Pro (CVE-2026-3300) enabling full site takeover; an actively exploited Cisco Catalyst SD‑WAN zero‑day (CVE-2026-20245) allowing root escalation; CISA reporting exploitation of a SolarWinds Serv-U vulnerability to crash servers; a Chinese APT (UNC5221) using Brickstorm and new malware (Plenet, AgentPSD) to maintain access to Microsoft 365 environments; supply‑chain compromises (npm
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 99ecb7a5538805b04213c40c5712cc8709d8a2b53236e119a96daa2c148b0620
- Enrichment time
- 2026-06-06T19:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.