Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
2026-06-08T14:51:47Z•d47be3a2f7f2dfd553b15a918891023c9c1f0083de8b656faeffd77915a9e6b1
account-takeoverai-recovery-toolc0xmocisa-kev-catalogue-barriered-asset-management?cve-2021-27137cve-2026-28318cve-2026-3300data-breachddosdentaquesteverest-formsextortiongafgytinstagramiot-botnetmetaphysical-intrusionprivilege-escalationshinyhunterssolarwinds-serv-uunc3753usb-dropvishingweb-application-vulnerabilitywordpress
What happened
Multiple high-impact security developments: a critical flaw in Everest Forms Pro for WordPress (CVE-2026-3300) allowed PHP injection via form fields to create rogue admin accounts and was actively exploited (≈29,300 blocked attempts); UNC3753 (Luna Moth/Chatty Spider) has escalated from vishing and remote session hijacks to in-person office intrusions and USB drop attacks targeting US legal and financial firms; a flaw in Meta’s High Touch Support (HTS) Instagram recovery tool exposed over 20,000 accounts enabling account takeovers; new IoT botnet variant C0XMO (Gafgyt family) exploits older Io
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- d47be3a2f7f2dfd553b15a918891023c9c1f0083de8b656faeffd77915a9e6b1
- Enrichment time
- 2026-06-08T14:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.