440,000 Exploit Attempts Target WordPress Plugin Flaws

Threat actors have initiated over 440,000 exploit attempts targeting two critical security vulnerabilities within popular WordPress plugins, Super Forms and Elementor Pro. These findings were detailed by Wordfence, a cybersecurity firm specializing in WordPress security. The vulnerabilities identified are CVE-2026-14894, a critical flaw in Super Forms – Drag & Drop Form Builder, and another unpatched vulnerability in Elementor Pro. The Super Forms vulnerability, assigned a CVSS score of 9.8, is characterized by a missing file type validation. This oversight allows unauthenticated attackers to upload arbitrary files of any type, including malicious scripts, to the affected WordPress websites. Such an exploit could lead to complete website compromise, enabling attackers to deface sites, steal sensitive data, or use the server for further malicious activities. Wordfence reported observing these exploit attempts on March 13, 2024. The attackers are leveraging these vulnerabilities to gain unauthorized access and execute code on vulnerable servers. The sheer volume of attempts suggests a coordinated and widespread campaign targeting WordPress users. Elementor Pro, a widely used page builder plugin for WordPress, is also facing exploitation, though the specific CVE for this vulnerability was not immediately detailed in the initial report. However, the active exploitation indicates a significant security risk for users of both plugins. Wordfence's Threat Intelligence team has been actively monitoring and blocking these attacks. The firm advises all users of Super Forms and Elementor Pro to ensure their installations are updated to the latest available versions, which should include patches for these vulnerabilities. Failure to update leaves websites exposed to potentially devastating attacks. The ongoing exploitation highlights the persistent threat landscape for WordPress sites, which remain a prime target for cybercriminals due to their widespread adoption and the potential for large-scale impact. Security researchers emphasize the importance of regular plugin updates and the use of robust security measures, such as Web Application Firewalls (WAFs), to mitigate such risks. The rapid exploitation of these flaws underscores the need for immediate action by website administrators to protect their digital assets and user data from unauthorized access and malicious manipulation. The specific number of exploit attempts, exceeding 440,000, indicates a high level of interest from threat actors in leveraging these particular weaknesses. This incident serves as a stark reminder of the critical need for continuous vigilance and proactive security practices within the WordPress ecosystem.