Critical Everest Forms Pro flaw exploited to take over WordPress sites
2026-06-07T13:23:32Z•f722a3c2084ef4b373b48ec9f3331c9db11ac34b16250fe859f608a3d5eab4a5
AgentPSDBrickstormCVE-2026-20245CVE-2026-3300Cisco Catalyst SD-WANDentaQuest breachEverest Forms ProHola BrowserIronWormMagecartPlenetSolarWinds Serv-UStripe abuseUNC5221WFP breachWordPressactive exploitationautomatic tank gauge (ATG) exposurecredential harvestingcryptominerdata breachnpm supply-chainpolyfill login promptsroot privilege escalationzero-day
What happened
Multiple high-impact security incidents and active exploitations reported: a critical Everest Forms Pro WordPress vulnerability (CVE-2026-3300) is being actively exploited for full site takeovers; Cisco Catalyst SD‑WAN Manager zero-day (CVE-2026-20245) is being exploited for root escalation; and a recently patched SolarWinds Serv‑U flaw is being used in crashes. Concurrently, supply‑chain and browser attacks are increasing — 36 npm packages infected with IronWorm, the Hola Browser Windows build was compromised to deliver a cryptominer, and a Magecart campaign is abusing Stripe to host card‑ste
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- f722a3c2084ef4b373b48ec9f3331c9db11ac34b16250fe859f608a3d5eab4a5
- Enrichment time
- 2026-06-07T13:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.