> TritonInfoSec News
Home / Sep 05, 2026 / Story
0
#8 The Hacker News general September 04, 2026 at 08:48 UTC

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

By [email protected] (The Hacker News)

AI Summary

Wordfence documented over 440,000 exploit attempts targeting two critical WordPress plugin vulnerabilities: CVE-2026-14894 (CVSS 9.8) in Super Forms allowing unauthenticated arbitrary file upload, and a separate critical RCE flaw in Elementor Pro. The attack volume targeting these plugins indicates active, widespread exploitation campaigns that place millions of WordPress sites at risk.

Read full article → https://thehackernews.com/2026/09/over-440000-expl…

Relevance score: 80.0/100

# More from September 05

  1. 1
    Critical Citrix NetScaler auth bypass now leveraged in attacks BleepingComputer
  2. 2
    Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day The Hacker News
  3. 3
    12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover SecurityWeek
  4. 4
    New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges BleepingComputer
  5. 5
    HPE Patches Critical RCE Vulnerabilities in AOS-CX SecurityWeek
  6. 6
    Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters The Hacker News
  7. 7
    IDScan sued over alleged data breach affecting 153 million drivers BleepingComputer
  8. 9
    Attackers exploit zero-days in consistently besieged SonicWall product CyberScoop
  9. 10
    Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal SecurityWeek