sign in--:--:--UTC

CVE-2026-3300

exploited in the wild☆ pin

CVSS

9.8

Reports

3

First seen

Jun 5, 2026

Last seen

Jul 10, 2026

Affected product

Everest Forms Pro <= 1.9.12

Associated actors

WP-SHELLSTORM ×1

Recent reports

WP-SHELLSTORM: Exposed Server Reveals Webshell Backdooring Operation Targeting 1.4M Sites

The Hacker NewsJul 10, 2026 Critical

Critical Everest Forms Pro Flaw Exploited to Take Over WordPress Sites

Bleeping ComputerJun 6, 2026 Critical

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

The Hacker NewsJun 5, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans