CYBER● ELEVATEDSep 4 · Sep 4, 2026, 8:48 AM
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
The Hacker News · global
Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence. The vulnerabilities in question are - CVE-2026-14894 (CVSS score: 9.8) - A missing file type validation vulnerability in Super Forms – Drag & Drop Form Builder that allows unauthenticated attackers to upload files of any type, including
GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.
More in Cyber
CYBERnow[Virtual Event] Cybersecurity Outlook 2027Dark ReadingCYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark ReadingCYBER3h agoDeepSeek offers user refunds after suffering another major outageSouth China Morning PostCYBER3h agoUkrainian troops lost Starlink access for a day. Elon Musk and the Trump White House both deny responsibility.Meduza [en]