Tag

Cve-2026-3300

1 brief RSS

Everest Forms Pro Plugin Remote Code Execution via PHP Injection

The Everest Forms Pro plugin for WordPress is vulnerable to remote code execution (RCE) due to a PHP Code Injection vulnerability (CVE-2026-3300) allowing unauthenticated attackers to execute arbitrary PHP code by exploiting insufficient input sanitization in the 'Complex Calculation' feature, affecting versions up to 1.9.12.

PoC wordpress rce php-injection cve-2026-3300

2r 1t 1c updated 37m ago