SecurityBleepingComputerabout 2 hours ago
Elementor Pro flaw exploited in WordPress attacks
1 min read
A critical Elementor Pro vulnerability (CVE-2026-32475) is under active attack, delivering webshells to WordPress sites. Patched August 19 in version 4.2.2, the flaw affects versions 4.2.1 and earlier. Wordfence blocked nearly 200,000 exploitation attempts. Administrators should upgrade immediately and inspect the /wp-content/uploads/elementor/forms/ directory for rogue PHP files.
Level
Hype check
Tap to vote and see what everyone thinks.
