Hosted on MSN

Experts claim WordPress sites are being hijacked using a critical flaw in popular plugin

Critical RCE flaw in Everest Forms Pro (CVE‑2026‑3300) actively exploited Attackers create rogue admin account “diksimarina” via PHP injection Nearly 30,000 takeover attempts blocked; admins urged to ...
Bleeping Computer

WordPress plugin ‘Gravity Forms’ vulnerable to PHP object injection

The premium WordPress plugin 'Gravity Forms,' currently used by over 930,000 websites, is vulnerable to unauthenticated PHP Object Injection. Gravity Forms is a custom form builder website owners use ...