{"metadata": {"vulnerability": "cve-2026-3300", "count": 67, "kinds": {"milestone": 4, "sighting": 48, "kev": 5, "other": 10}}, "data": [{"timestamp": "2026-02-26T20:26:05.469Z", "date_only": false, "value": "2026-02-26T20:26:05.469Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-3300", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-26T20:41:42Z", "date_only": false, "value": "2026-02-26T20:41:42.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-3300", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-03-30T12:00:40Z", "date_only": false, "value": "2026-03-30T12:00:40.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-3300", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-03-31T01:24:57.875Z", "date_only": false, "value": "2026-03-31T01:24:57.875Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-3300", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-31T02:15:59Z", "date_only": false, "value": "2026-03-31T02:15:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JFQC-5RVH-WP99", "record": "GHSA-JFQC-5RVH-WP99", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-31T02:15:59.267Z", "date_only": false, "value": "2026-03-31T02:15:59.267", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3300", "record": "FKIE_CVE-2026-3300", "field": "published"}, {"timestamp": "2026-03-31T02:21:10.365Z", "date_only": false, "value": "2026-03-31T02:21:10.365707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mid4jgk2ha2p", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "23c13e2a-ef94-46c3-ac3b-d91a5dcc17d6", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mid4jgk2ha2p"}, {"timestamp": "2026-03-31T02:21:26.450Z", "date_only": false, "value": "2026-03-31T02:21:26.450812Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mid4jw62js2r", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "ce6dc4e1-2889-4878-b2ca-d27cd3539ff9", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mid4jw62js2r"}, {"timestamp": "2026-03-31T03:00:30.543Z", "date_only": false, "value": "2026-03-31T03:00:30.543103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mid6prcxyj2f", "record": "cve-2026-3300", "field": "creation_timestamp", "uuid": "08a23e0c-85a4-4390-897c-e5d3a7143fbe", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mid6prcxyj2f"}, {"timestamp": "2026-03-31T03:17:25Z", "date_only": false, "value": "2026-03-31T03:17:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/v8IgW6gHpWVIushUEONWR1rBf1AadyMpGfLyvEGnY-900sw", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "210819be-27c3-4f5e-9234-c945e8eb7809"}, {"timestamp": "2026-03-31T03:25:50.772Z", "date_only": false, "value": "2026-03-31T03:25:50.772271Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mida53vz5p27", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "ab790d70-e8eb-4ff4-8515-408aa374be95", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mida53vz5p27"}, {"timestamp": "2026-03-31T03:31:26Z", "date_only": false, "value": "2026-03-31T03:31:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JFQC-5RVH-WP99", "record": "GHSA-JFQC-5RVH-WP99", "field": "published"}, {"timestamp": "2026-03-31T03:31:26Z", "date_only": false, "value": "2026-03-31T03:31:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JFQC-5RVH-WP99", "record": "GHSA-JFQC-5RVH-WP99", "field": "modified"}, {"timestamp": "2026-03-31T04:50:38.586Z", "date_only": false, "value": "2026-03-31T04:50:38.586389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mideuplzqp2r", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "caf4f97e-9e37-43f5-96fe-bf080a318739", "url": "https://bsky.app/profile/clankussy.abu.guru/post/3mideuplzqp2r"}, {"timestamp": "2026-03-31T05:04:40.080Z", "date_only": false, "value": "2026-03-31T05:04:40.080552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3midfns6xzi2o", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "627f81d4-a05c-4996-bb09-1a389b0d9685", "url": "https://bsky.app/profile/postac001.bsky.social/post/3midfns6xzi2o"}, {"timestamp": "2026-03-31T09:21:01.212Z", "date_only": false, "value": "2026-03-31T09:21:01.212934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3midtxxm3l22k", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "34722cf5-4765-42a7-ab51-ce816bd6f982", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3midtxxm3l22k"}, {"timestamp": "2026-03-31T09:21:01.667Z", "date_only": false, "value": "2026-03-31T09:21:01.667845Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3midty2aetk2k", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "4224e6f2-a362-4dab-a1d3-aba89f0325ae", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3midty2aetk2k"}, {"timestamp": "2026-03-31T13:59:02.964Z", "date_only": false, "value": "2026-03-31T13:59:02.964128Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-3300", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-31T13:59:02.964Z", "date_only": false, "value": "2026-03-31T13:59:02.964128Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3300", "record": "FKIE_CVE-2026-3300", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-31T13:59:10.865Z", "date_only": false, "value": "2026-03-31T13:59:10.865Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-3300", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:46:32.896Z", "date_only": false, "value": "2026-04-08T16:46:32.896Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-3300", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:46:32.896Z", "date_only": false, "value": "2026-04-08T16:46:32.896Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2026-3300", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-05T06:38:59Z", "date_only": false, "value": "2026-06-05T06:38:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.html", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "e1d87b3f-7abf-469d-adad-12d2e76d6d1d", "content": "Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise.\n\nThe vulnerability in question is CVE-2026-3300 (CVSS score: 9.8), a remote code execution bug impacting all versions of the plugin up to, and including, 1.9.12. A patch for the flaw was", "url": "https://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.html"}, {"timestamp": "2026-06-05T08:51:16.020Z", "date_only": false, "value": "2026-06-05T08:51:16.020476Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnjr337atqm2", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "4913acd0-d1b7-4f40-a40f-b34433138ce7", "content": "Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites TheHackerNews Threat actors are actively exploiting CVE-2026-3300, a critical RCE vulnerability (CVSS 9.8) in Eve...\n\n#Security #News\n\nOrigin | Interest | Match", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnjr337atqm2"}, {"timestamp": "2026-06-05T09:03:14.408Z", "date_only": false, "value": "2026-06-05T09:03:14.408720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnjrr5iqbm2p", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "27255726-80fa-4d7d-aded-77e17daac42d", "content": "Everest Forms Pro CVE-2026-3300 enables unauthenticated remote code execution via eval() injection, allowing full site compromise unless updated to 1.9.13.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnjrr5iqbm2p"}, {"timestamp": "2026-06-05T09:05:00.570Z", "date_only": false, "value": "2026-06-05T09:05:00.570182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mnjrucz5ab2i", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "99879c38-a196-4d87-8497-b75c18564d2b", "content": "A critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin is being actively exploited for remote code execution, compromising [\u2026]", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mnjrucz5ab2i"}, {"timestamp": "2026-06-05T09:20:13Z", "date_only": false, "value": "2026-06-05T09:20:13+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-3300", "field": "timestamps.asserted_at", "uuid": "b390f7a2-0450-49f7-add2-30396d9cf753", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T09:20:13Z", "date_only": false, "value": "2026-06-05T09:20:13+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-3300", "field": "timestamps.first_seen_at", "uuid": "b390f7a2-0450-49f7-add2-30396d9cf753", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T09:20:13Z", "date_only": false, "value": "2026-06-05T09:20:13+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-3300", "field": "status.status_updated_at", "uuid": "b390f7a2-0450-49f7-add2-30396d9cf753", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T09:20:13.225Z", "date_only": false, "value": "2026-06-05T09:20:13.225Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-3300", "field": "evidence.0.details.added_date", "uuid": "b390f7a2-0450-49f7-add2-30396d9cf753", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T09:53:15.222Z", "date_only": false, "value": "2026-06-05T09:53:15.222215Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnjuklsfzi2j", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "f40b1251-9b25-4982-a7a6-75175b51ca49", "content": "CVE-2026-3300: explotaci\u00f3n activa en Everest Forms Pro\n\n\u00bfUs\u00e1s Everest Forms Pro 1.9.12 o menor? La vulnerabilidad CVE-2026-3300 ya tiene 29.300 ataques registrados. Actualiz\u00e1 a 1.9.13 y audit\u00e1 tu sitio ahora.\n\n#everestformspro #cve20263300 #inyecci\u00f3ndec\u00f3digo #rcewordpress #seguridadwordpress", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnjuklsfzi2j"}, {"timestamp": "2026-06-05T10:01:08.124Z", "date_only": false, "value": "2026-06-05T10:01:08.124310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjuyp36t42d", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "61d005c6-705d-4667-b328-a432447f3c92", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-3300\n\n\u2022 CVE ID: CVE-2026-3300\n\u2022 CVSS Score: 9.8 (Critical)\n\u2022 Affected: Everest Forms P\n\nhttps://securitycyber.uk", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjuyp36t42d"}, {"timestamp": "2026-06-05T10:36:16Z", "date_only": false, "value": "2026-06-05T10:36:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/3rAexOycpShi3oSra_0BZQY6vjxK-dHHIS6F1dPKvPRJLg", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "195db7a8-9e4b-467c-8124-f1ad4e0dca52"}, {"timestamp": "2026-06-05T11:57:08.556Z", "date_only": false, "value": "2026-06-05T11:57:08.556429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnk3i4bf5d2z", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "53303f61-1b2f-4909-bcca-954c18b8d171", "content": "Everest Forms Pro\uff08\u5168\u30d0\u30fc\u30b8\u30e7\u30f31.9.12\u307e\u3067\uff09\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-3300\u3001CVSS 9.8\uff09\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u30b5\u30a4\u30c8\u3092\u4e57\u3063\u53d6\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mnk3i4bf5d2z"}, {"timestamp": "2026-06-05T12:16:10.266Z", "date_only": false, "value": "2026-06-05T12:16:10.266168Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mnk4k5ppzp2h", "record": "cve-2026-3300", "field": "creation_timestamp", "uuid": "b8e464c1-175c-49d7-af74-43a5e6b247c8", "content": "Actively Exploited: CVE-2026-3300 Gives Attackers Full Control of WordPress Sites Running Everest Forms Pro\n\nhttps://blindthoughts.com/cve-2026-3300-everest-forms-pro-rce-exploit\n\n#wordpress #rce #vulnerability #patchnow #websecurity", "url": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mnk4k5ppzp2h"}, {"timestamp": "2026-06-05T15:00:07Z", "date_only": false, "value": "2026-06-05T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/O_vzfgb5tpNhGc4dFY5yEuw_msb6z_Oos8ooFDoWVZhaadQ", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "e13a1cae-b2cc-4a17-8e78-e6e2da154bfc"}, {"timestamp": "2026-06-05T15:00:18Z", "date_only": false, "value": "2026-06-05T15:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/I55EnFdJmYEBchmRtkjPCUSn7qv5UvMe7YwNG8H83xOzV0w", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "f159642a-5870-413c-8fca-cc9aaa5e754e"}, {"timestamp": "2026-06-05T18:00:06Z", "date_only": false, "value": "2026-06-05T18:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8286", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "d50c1764-a2ba-45b9-bd5b-0b79bb4ac98e", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 0x12 Dark Development \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Bring Your Own RWX Region DLL (BYORWXDLL).\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u044d\u0442\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 DLL \u0441 \u043f\u0440\u0435\u0434\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 RWX (\u0447\u0442\u0435\u043d\u0438\u0435+\u0437\u0430\u043f\u0438\u0441\u044c+\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435) \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u043a\u043e\u0434\u0430.\n\n2. Manifold \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 n8n MCP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 n8n.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitHub Action \u043e\u0442 Anthropic \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Claude Code, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u044d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u0438\u043c\u0435\u044f \u043f\u0440\u0438 \u0441\u0435\u0431\u0435 \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443 \u043d\u0430 GitHub.\u00a0\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Action \u043e\u0442 Anthropic \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0441\u0430\u043c Action \u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 GMO Flatt Security, \u0430 Anthropic\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0451 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u0434\u043d\u0435\u0439. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u043f\u0430\u043a\u0435\u0442 claude-code-action v1.0.94. Anthropic \u043e\u0446\u0435\u043d\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0430 7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 CVSS v4.0 \u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SafeBreach \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u043c \u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0435 Google Gemini, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0418\u0418, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430\u0445.\n\n\u041e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445, SafeBreach \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0446\u0435\u043b\u043e\u043c \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0439 Fake Context Alignment.\n\n5. \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Everest Forms Pro \u0441 4000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e CVE-2026-3300 (CVSS: 9.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 1.9.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d 18 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.9.13.\n\n6. \u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 Cisco \u0442\u0430\u043a \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-20230 \u0432 Unified Communications Manager, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432 \u0441\u0435\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438 \u043e\u0442\u0442\u0443\u0434\u0430 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root. Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\u00a0\n\n7. \u0412 Tier Zero Security \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043e\u0439\u0442\u0438 Mark of the Web, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 .targets NuGet. \u0417\u0430\u0434\u0430\u0447\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u0430\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NuGet. MSRC \u043d\u0430\u0437\u0432\u0430\u043b\u0430 \u044d\u0442\u043e \u043d\u0435 \u043e\u0448\u0438\u0431\u043a\u043e\u0439, \u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e.\n\n8. \u0412 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438 SOPlanning \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u043a\u0440\u0430\u0436\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439, \u0430\u0442\u0430\u043a \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0438 \u043c\u043d\u043e\u0433\u043e\u0433\u043e \u0434\u0440\u0443\u0433\u043e\u0433\u043e.\n\n9. OpenSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday. \u041d\u0438\u0447\u0435\u0433\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e, \u043d\u043e \u0435\u0441\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0448\u0438\u0431\u043e\u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n10. \u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0419\u0435\u043d\u0438 \u0428\u0435\u0440\u0435\u0437 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 DarkReplica (CVE-2026-23631), RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Redis, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u043c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 ZeroDayCloud.\n\n11. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u043c \u044d\u043a\u0440\u0430\u043d\u0435 Comodo Internet Security \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u043d\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 IP \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430. \u041e\u043d\u0430 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0435 \u043e\u0442\u0432\u0435\u0442\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u041c\u0430\u0440\u043a\u0443\u0441\u0443 \u0425\u0430\u0442\u0447\u0438\u043d\u0441\u0443. PoC \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f.\n\n12. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-45247 (CVSS 9,8) \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Mirasvit Full Page Cache Warmer \u0434\u043b\u044f Magento 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f RCE.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Sansec, \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Mirasvit, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u0432 cookie-\u0444\u0430\u0439\u043b CacheWarmer \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u044b.", "url": "https://t.me/true_secator/8286"}, {"timestamp": "2026-06-06T14:12:44.617Z", "date_only": false, "value": "2026-06-06T14:12:44.617638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mnmtjajdce22", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "531178bc-4ade-47b1-b044-cbe0461f23cc", "content": "Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website.", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mnmtjajdce22"}, {"timestamp": "2026-06-06T14:25:32.383Z", "date_only": false, "value": "2026-06-06T14:25:32.383634Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnmuafszlf2c", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "9e75d16d-727d-4e0f-b507-781a99a1298f", "content": "Everest Forms Pro\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001WordPress\u30b5\u30a4\u30c8\u304c\u4e57\u3063\u53d6\u3089\u308c\u308b\u88ab\u5bb3\n\n\u30cf\u30c3\u30ab\u30fc\u304cEverest Forms Pro\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-3300\uff09\u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3066\u304a\u308a\u3001WordPress\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u3092\u5b8c\u5168\u306b\u5236\u5fa1\u3067\u304d\u308b\u72b6\u614b\u306b\u7f6e\u304b\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f31.9.12\u4ee5\u524d\u306b\u5f71\u97ff\u3057\u3001\u8a8d\u8a3c\u306a\u3057\u306b\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b\u305f\u3081\u306b\u5229\u7528\u3055\u308c\u308b\u53ef", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnmuafszlf2c"}, {"timestamp": "2026-06-06T16:03:32.752Z", "date_only": false, "value": "2026-06-06T16:03:32.752323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnmzpmw6lm24", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "0aef5f7f-5503-4cbc-b193-39261d43992e", "content": "Everest Forms Pro\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027(CVE-2026-3300)\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306fWordPress\u30b5\u30a4\u30c8\u3092\u5b8c\u5168\u306b\u5236\u5fa1\u53ef\u80fd\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mnmzpmw6lm24"}, {"timestamp": "2026-06-06T16:19:28.772Z", "date_only": false, "value": "2026-06-06T16:19:28.772387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mnn2m4ror42b", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "02190b1c-5875-4501-918b-bbc792ebf7b8", "content": "Critical 0-Day Alert: Unauthenticated RCE in Everest Forms Pro (CVE-2026-3300) Enables Full Site Takeover +\u00a0Video\n\nIntroduction: A critical Remote Code Execution (RCE) vulnerability, identified as CVE-2026-3300 with a CVSS score of 9.8 (Critical), is being actively exploited in the wild against the\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mnn2m4ror42b"}, {"timestamp": "2026-06-06T16:37:59.140Z", "date_only": false, "value": "2026-06-06T16:37:59.140897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mnn3na5xen2o", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "0ba0fb02-71ab-471e-9f6e-8fa80c1b3e33", "content": "Heads up, WordPress users! A severe RCE vulnerability (CVE-2026-3300) in Everest Forms Pro is being actively exploited. Attackers are creating rogue admin accounts. If you use this plugin, update to v1.9.13 immediately to\u2026\n\nhttps://www.tpp.blog/bkuolai\n\n#cybersecurity #everestformspro #wordpress", "url": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mnn3na5xen2o"}, {"timestamp": "2026-06-06T18:00:46.899Z", "date_only": false, "value": "2026-06-06T18:00:46.899695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mnnabbrxj32v", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "4dcf52f0-a055-48c7-82b4-9b4eded1c44b", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\n\n\ud83d\udd17 https://hnow.live/a/48b0cd80", "url": "https://bsky.app/profile/happeningnow.news/post/3mnnabbrxj32v"}, {"timestamp": "2026-06-06T18:45:24.688Z", "date_only": false, "value": "2026-06-06T18:45:24.688459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnncr37fkk2a", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "7cbcd308-cc8d-492e-bf32-4f63a50653e1", "content": "CVE-2026-3300 in Everest Forms Pro v1.9.12 and earlier is being exploited for unauthenticated code execution on WordPress, letting attackers create rogue admin accounts. #EverestFormsPro #WordPress #Wordfence", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnncr37fkk2a"}, {"timestamp": "2026-06-07T11:50:25Z", "date_only": false, "value": "2026-06-07T11:50:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/06/07/critical-everest-forms-pro-flaw.html", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "503c082d-2c21-42b8-9eb8-962463603ad0", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin to execute arbitrary code and seize administrative control of WordPress websites. Users should update to the patched version immediately and scan their systems for suspicious accounts like ‘diksimarina’.", "url": "https://threatintel.cc/2026/06/07/critical-everest-forms-pro-flaw.html"}, {"timestamp": "2026-06-07T13:50:19.919Z", "date_only": false, "value": "2026-06-07T13:50:19.919319Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116709144623003901", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "5e792e37-6f51-4273-8ca7-d48e2f74080e", "content": "Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin to execute arbitrary code and seize administrative control of WordPress websites. Users should update to the patched version immediately and scan their systems for suspicious accounts like 'diksimarina'.https://www.bleepingcomputer.com/news/security/critical-everest-forms-pro-flaw-exploited-to-take-over-wordpress-sites/", "url": "https://infosec.exchange/users/edwardk/statuses/116709144623003901"}, {"timestamp": "2026-06-07T22:17:19.844Z", "date_only": false, "value": "2026-06-07T22:17:19.844192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnq72x5h5s2h", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "066f9e2b-7798-4b6d-9aea-3c21eee9511c", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnq72x5h5s2h"}, {"timestamp": "2026-06-08T02:31:12.321Z", "date_only": false, "value": "2026-06-08T02:31:12.321332Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnqnav4zj726", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "8f4be107-5074-4bde-a4e7-d135bd9bc594", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-46243: 23 interactions\nCVE-2015-5119: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4372: 4 interactions\nCVE-2022-0492: 3 interactions\nCVE-2026-3300: 3 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mnqnav4zj726"}, {"timestamp": "2026-06-08T05:14:44.523Z", "date_only": false, "value": "2026-06-08T05:14:44.523881Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnqwfd2dok2g", "record": "cve-2026-3300", "field": "creation_timestamp", "uuid": "902e6d1e-85b2-46b9-8ad8-15337c91376a", "content": "\ud83d\udcf0 Celah Keamanan Kritis Everest Forms Pro Dieksploitasi untuk Ambil Alih Situs WordPress\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/08/celah-everest-forms-pro-dieksploitasi-untuk-ambil-alih-wordpress/\n\n#cve-2026-3300 #diksimarina #eksploitasiRce #everestFormsPro #hacker #in", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnqwfd2dok2g"}, {"timestamp": "2026-06-08T12:33:52.582Z", "date_only": false, "value": "2026-06-08T12:33:52.582629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnrowknshm2k", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "6976cc1b-ba93-4dc6-b66b-f05462d348e3", "content": "Unauthenticated attackers can exploit CVE-2026-3300 in Everest Forms Pro to inject and execute arbitrary PHP via Complex Calculation, enabling site takeover.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnrowknshm2k"}, {"timestamp": "2026-06-08T14:01:29.872Z", "date_only": false, "value": "2026-06-08T14:01:29.872262Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mnrttaipd22r", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "31854fc4-f4ae-4e3d-9bd1-a93c1528124a", "content": "Defiant varuje p\u0159ed kritickou zranitelnost\u00ed CVE-2026-3300 v pluginu Everest Forms Pro pro WordPress", "url": "https://bsky.app/profile/365tipu.cz/post/3mnrttaipd22r"}, {"timestamp": "2026-06-08T15:27:55.147Z", "date_only": false, "value": "2026-06-08T15:27:55.147685Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnrynlbdy422", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "9f13f543-2046-4c26-a0c5-de8139f68fbe", "content": "Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Hackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts b...\n\n#Breaking #News #Hacking #Security #Cybercrime [\u2026] \n\n[Original post on securityaffairs.com]", "url": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnrynlbdy422"}, {"timestamp": "2026-06-08T15:45:26.162Z", "date_only": false, "value": "2026-06-08T15:45:26.162100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnrzn3kuyf27", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "516380ba-a606-467e-a3c8-c63b78fabe45", "content": "Critical Everest Forms Pro flaw (CVE-2026-3300) has been exploited for months to inject PHP, create admin accounts, and deploy web shells on WordPress sites. #EverestForms #CVE2026 #WordPress", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnrzn3kuyf27"}, {"timestamp": "2026-06-08T22:00:22.649Z", "date_only": false, "value": "2026-06-08T22:00:22.649052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mnsolkljqo2t", "record": "cve-2026-3300", "field": "creation_timestamp", "uuid": "959d3cf6-4b30-4a5a-95c0-75cc69687ce6", "content": "\ud83d\udce2 Exploitation active de CVE-2026-3300 dans Everest Forms Pro pour compromettre des sites WordPress\n\ud83d\udcdd \ud83d\udcf0 **Source** : BleepingCompute\u2026\nhttps://cyberveille.ch/posts/2026-06-08-exploitation-active-de-cve-2026-3300-dans-everest-forms-pro-pour-compromettre-des-sites-wordpress/ #CVE_2026_3300 #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mnsolkljqo2t"}, {"timestamp": "2026-06-09T09:00:05.915Z", "date_only": false, "value": "2026-06-09T09:00:05.915630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mntth7xbws2h", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "aca7a039-0836-4d82-b02a-b9ada9ec9b4f", "content": "Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access\n\nHackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts blocked. Researcher h0xilo submitted a flaw in Everest Forms Pro for WordPress, trac\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mntth7xbws2h"}, {"timestamp": "2026-06-09T10:03:15Z", "date_only": false, "value": "2026-06-09T10:03:15.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-3300.yaml", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "c18265d1-85af-4cdb-a8f7-0daf9f8bd2f0", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-3300.yaml"}, {"timestamp": "2026-06-17T10:43:22.287Z", "date_only": false, "value": "2026-06-17T10:43:22.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3300", "record": "FKIE_CVE-2026-3300", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:09.916Z", "date_only": false, "value": "2026-06-19T12:45:09.916596Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/00dbc2e7-258a-400e-9f4e-3481d9b96758", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "38a1c334-1b08-4b94-b6c3-d669c77ec0e2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/00dbc2e7-258a-400e-9f4e-3481d9b96758"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-3300", "field": "timestamps.recorded_at", "uuid": "b390f7a2-0450-49f7-add2-30396d9cf753", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:01.758Z", "date_only": false, "value": "2026-06-23T14:03:01.758712Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b390f7a2-0450-49f7-add2-30396d9cf753", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "d0f835fb-ca0a-4929-bdc2-ec2f84fa028b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b390f7a2-0450-49f7-add2-30396d9cf753"}, {"timestamp": "2026-07-12T12:00:04.508Z", "date_only": false, "value": "2026-07-12T12:00:04.508518Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/24834", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "06732ee9-f546-4fae-8623-7342ca4c1a70", "content": "\u200aCritical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-everest-forms-pro-flaw-exploited-to-take-over-wordpress-sites/", "url": "https://t.me/BleepingComputer/24834"}, {"timestamp": "2026-07-12T22:00:14.110Z", "date_only": false, "value": "2026-07-12T22:00:14.110223Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/12337", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "99da116e-323d-44ea-abe7-60fee17fcd27", "content": "\u2757\ufe0fExplotaci\u00f3n activa de la #vulnerabilidad cr\u00edtica CVE-2026-3300 en el plugin Everest Forms Pro para WordPress\nhttps://short.do/Nm0sWu", "url": "https://t.me/pleyades_it/12337"}, {"timestamp": "2026-07-14T00:00:54.289Z", "date_only": false, "value": "2026-07-14T00:00:54.289889Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pleyades_it/12337", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "89eccf18-678c-43eb-a5da-4e4625f5801d", "content": "\u2757\ufe0fExplotaci\u00f3n activa de la #vulnerabilidad cr\u00edtica CVE-2026-3300 en el plugin Everest Forms Pro para WordPress\nhttps://short.do/Nm0sWu", "url": "https://t.me/pleyades_it/12337"}, {"timestamp": "2026-09-02T21:54:22.475Z", "date_only": false, "value": "2026-09-02T21:54:22.475744Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mukwdyrcdh2r", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "abb3460d-a8eb-4656-991d-81de03145a5d", "content": "Critical RCE Vulnerability CVE-2026-3300 in Everest...\n\nhttps://techjacksolutions.com/scc-intel/active-exploitation-of-critical-cve-2026-3300-vulnerability-in-everest-forms-pro-plugin-threatens-wordpress-sites-globally\nhttps://flagthis.com/tldr/6859\n\n##RCE ##WordPress ##CVE-2026-3300 ##Vulnerability", "url": "https://bsky.app/profile/royans.bsky.social/post/3mukwdyrcdh2r"}, {"timestamp": "2026-09-18T05:00:05.501Z", "date_only": false, "value": "2026-09-18T05:00:05.501934Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42866", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "e5dbbb11-c8ee-49f6-94fa-0fe004823109", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-everest-forms-pro-flaw-exploited-to-take-over-wordpress-sites/", "url": "https://t.me/VulnerabilityNews/42866"}, {"timestamp": "2026-09-19T00:00:47.382Z", "date_only": false, "value": "2026-09-19T00:00:47.382834Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42866", "record": "CVE-2026-3300", "field": "creation_timestamp", "uuid": "05fb6138-b863-46d0-af85-afaa5ee9e655", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-everest-forms-pro-flaw-exploited-to-take-over-wordpress-sites/", "url": "https://t.me/VulnerabilityNews/42866"}]}