Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

WordPress users beware — experts claim sites are being hijacked using a critical flaw in popular Everest Forms Pro plugin

Wordpress brand logo on computer screen. Man typing on the keyboard.
  • Critical RCE flaw in Everest Forms Pro (CVE‑2026‑3300) actively exploited
  • Attackers create rogue admin account “diksimarina” via PHP injection
  • Nearly 30,000 takeover attempts blocked; admins urged to patch and block key IPs

Security researchers are warning of an ongoing hacking campaign targeting certain WordPress websites using a popular plugin tool.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.