Everest Forms Vulnerability Exploited to Hack WordPress Sites
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 1.9.13 : patch affected systems soon.
Data as of 9 Jun 2026, 11:43 UTC
Rated High by Threat Radar from the SecurityWeek text
- Patch
- Available – fixed in 1.9.13
What to do
AI-suggested
An official patch addressing this vulnerability is available in Everest Forms Pro version 1.9.13 and later. Site administrators should update to this version immediately. Additionally, administrators should audit their WordPress sites for unauthorized administrator accounts, especially those with the username 'diksimarina' or the email address 'diksimarina@gmail.com'. No other specific mitigations are indicated by the vendor advisory.
Description
The flaw allows attackers to execute arbitrary code remotely and has been exploited in the wild for two months. The post Everest Forms Vulnerability Exploited to Hack WordPress Sites appeared first on SecurityWeek .