Tag: Elementor Pro

Cyber Products

Elementor Pro: WordPress Plugin with Critical RCE Flaw

A popular WordPress page builder plugin. Versions up to 4.2.1 are vulnerable to unauthenticated PHP upload and RCE (CVE-2026-32475). Patched in 4.2.2.

Elementor Pro file upload RCE WordPress plugin

August 20, 2026

Critical CVEs

Critical Elementor Pro Flaw Allows Unauthenticated PHP Upload and RCE

Cybersecurity researchers have disclosed a critical vulnerability in the Elementor Pro WordPress plugin that could allow unauthenticated attackers to upload PHP files…

CVE-2026-32475 CVE-2026-65640 Elementor Elementor Pro

August 20, 2026