Vulnerabilities4 min read
WordPress Plugin RCE Under Mass Exploitation — 29K Attacks
CVE-2026-3300 in Everest Forms Pro allows unauthenticated attackers to execute PHP code via eval() injection. Over 29,300 exploit attempts blocked since April despite patch availability.
Marcus ChenJun 6, 2026