- Critical RCE flaw in Everest Forms Pro (CVE‑2026‑3300) actively exploited
- Attackers create rogue admin account “diksimarina” via PHP injection
- Nearly 30,000 takeover attempts blocked; admins urged to patch and block key IPs
Security researchers are warning of an ongoing hacking campaign targeting certain WordPress websites using a popular plugin tool.