Filtered by category: Security Week, tag: file upload vulnerability × Clear
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Matched: WordPress
A critical vulnerability in the Elementor Pro WordPress plugin, CVE-2026-32475, is being actively exploited. Scoring 9.8 on the CVSS scale, the flaw is an arbitrary file upload bug in the plugin's form submission handler, allowing attackers to upload malicious files and potentially take full control of affected websites. Site owners are urged to update immediately.