SecurityThe Hacker Newsabout 1 hour ago
Elementor Pro Flaw Enables Remote Code Execution
1 min read
A critical Elementor Pro WordPress plugin flaw, CVE-2026-32475 (CVSS 9.0), lets unauthenticated attackers upload PHP files and execute code. It affects versions up to 4.2.1; patch 4.2.2 was released August 19. Researcher Tin Pham reported it.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
