A critical vulnerability in the Everest Forms Pro plugin, identified as CVE-2026-3300, is being actively exploited by hackers to gain complete control over WordPress sites. This flaw allows attackers to seize control of vulnerable websites, posing a significant threat to website owners and administrators. The exploitation of this vulnerability enables hackers to execute arbitrary code, potentially leading to data breaches, malware distribution, and other malicious activities. As a result, websites using the Everest Forms Pro plugin are at risk of being compromised, emphasizing the need for immediate attention and remediation1. The disclosure of CVE-2026-3300 expands the attack surface, making it essential for website owners to prioritize their security based on exposure and exploitation evidence. This vulnerability poses a significant risk to WordPress sites, and practitioners must take swift action to protect their websites from potential takeovers.