Hackers Exploit Critical Super Forms WordPress Flaw to Upload Webshells and Execute Code

Threat actors are actively exploiting a critical vulnerability in the Super Forms WordPress plugin to upload PHP webshells and potentially seize full control of vulnerable websites. Wordfence said its firewall has already blocked more than 250,000 exploitation attempts. The issue, tracked as CVE-2026-14894, affects Super Forms – Drag & Drop...