Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-20 06:04 UTC
  • Importiert: 2026-08-26 13:31 UTC
  • CVSS: 9.0
  • Quelle-ID: thn_global
  • uid_hash: 4ba465d83d105cf5ca0d6dc4fe682ddb87b76dcdb1f41e28226cd589b233bb07
The Hacker News

Inhalt

Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution.

The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous type.

"The flaw lives in the Forms module's File

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-32475

CRITICAL

9

CRITICAL

9

2026-08-19

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste