Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Teaser from the source
Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions. The post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
Affected vendors and products
More on WordPress
Other advisories
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-119977WordPress: Schwachstelle ermöglicht Codeausführung
- HighCVE-2026-66570Nickboss WordPress File Upload: Cross-Site-Scripting (XSS)
- HighCVE-2026-66570Nickboss WordPress File Upload: Cross-Site-Scripting (XSS)
- Not ratedhkcert:wordpress-multiple-vulnerabilities_20261102WordPress Multiple Vulnerabilities
- Not ratedosv:CLEANSTART-2025-GV56895Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions up to, and including, 2
- MediumCVE-2026-15272Shamalli Web 2.0 Directory plugin for WordPress: SQL-Injection
Other news entries
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last TimeNewsThe Hacker News
- CISA flags WordPress RCE flaw as actively exploited in attacksNewsBleepingComputer
- NCSC-2026-0466 [1.00] [L/H] Kwetsbaarheid verholpen in WordPress CoreNewsNCSC-NL
- CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesNewsThe Hacker News
- Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet CredentialsNewsThe Hacker News
- WordPress: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
Source: https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/
ID