Threat actors are actively exploiting a critical vulnerability in the Super Forms WordPress plugin to upload PHP webshells and potentially seize full control of vulnerable websites. Wordfence said its firewall has already blocked more than 250,000 exploitation attempts. The issue, tracked as CVE-2026-14894, affects Super Forms – Drag & Drop Form Builder versions 6.3.313 and […]
The post Hackers Exploit Critical Super Forms WordPress Flaw to Upload Webshells and Execute Code appeared first on Cyber Security News.