Critical WordPress Plugin Vulnerability Exposes 70,000+ Sites to RCE Attacks

Threat Score:
52
Cybersecurity News
1 day ago

Overview

A critical security vulnerability has been discovered in the popular “Database for Form 7, WPforms, Elementor forms” WordPress plugin, potentially exposing over 70,000 websites to remote code execution attacks.  The vulnerability, tracked as CVE-2025-7384 with a maximum CVSS score of 9.8, affects all versions up to and including 1.4.3 and was publicly disclosed on […]...

Related Articles

5 articles
1

New Crypto24 Ransomware Attacks Bypass EDR

Dark Reading • 10 hours ago

While several cybercrime groups have embraced "EDR killers," researchers say the deep knowledge and technical skills demonstrated by Crypto24 signify a dangerous escalation.

Score
84
Read more
4

Ransomware Actors Blending Legitimate Tools with Custom Malware to Evade Detection

Cybersecurity News • 8 hours ago

The cybersecurity landscape faces a new sophisticated threat as the Crypto24 ransomware group demonstrates an alarming evolution in attack methodology, seamlessly blending legitimate administrative tools with custom-developed malware to execute precision strikes against high-value targets. This emerging ransomware operation has successfully compromised organizations across Asia, Europe, and the United States, with a particular focus on […]

Score
74
Read more