In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
SecurityWeek weekly roundup covers exploited WordPress Super Forms flaw CVE-2026-14894, a $10M bounty on an Iranian cyber official, InjectEave attacks, and more.
45
Product
Super Forms
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 3, 2026
- Last mentionedSep 11, 2026
Timeline
3 articles · newest firstOver 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Wordfence blocked 440,000+ exploit attempts against critical unauthenticated RCE flaws in WordPress plugins Super Forms and Elementor Pro.
80
Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin
Attackers are actively exploiting a critical unauthenticated file upload flaw in the Super Forms WordPress plugin to deploy PHP backdoors for RCE.
58
Related CVEs
by mentions- CVE-2026-148943%9.8The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the…
- CVE-2026-324752%9.0Unauthenticated PHP File Upload (RCE) in Elementor Pro WordPress Plugin
Appears with
- Wordfencevendor · 2
- CISAorganization · 1
- Claudeai model · 1
- VulnCheckorganization · 1
- Elementorvendor · 1
- Anthropicvendor · 1
- Mushr00w_upl.phpmalware · 1
- WordPressproduct · 1
- FBIorganization · 1
- Project Glasswingproduct · 1
- Patchstackvendor · 1
- Microsoftvendor · 1
- QTFYthreat actor · 1
- IRGC-CECorganization · 1
- AT&Tvendor · 1
- Elementor Proproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.