Critical Elementor Pro flaw exploited to take over WordPress sites

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-03 14:52 UTC
  • Importiert: 2026-09-05 14:08 UTC
  • CVSS: 9.0
  • Quelle-ID: bleeping_c
  • uid_hash: ffbf34a4901b3f471391ce925fbe842c13346afdc072c5fcf47f3213145c4ceb

Inhalt

A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. [...]

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-32475

CRITICAL

9

CRITICAL

9

2026-08-19

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
BleepingComputer

bleeping_c

security_news - de https://www.bleepingcomputer.com/feed/