CyberSecurity News

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

SecurityWeek

· September 5, 2026

AI summary

A vulnerability in the Elementor Pro WordPress plugin is being exploited to hack websites. The issue is an arbitrary file upload problem in the function that handles form submissions and has been assigned a CVSS score of 9.8 as CVE-2026-32475. This bug allows for malicious activity, putting sites at risk. The vulnerability is considered highly severe due to its high CVSS score.

Vulnerabilities mentioned

CVE-2026-32475

CRITICAL

CVSS 9

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

Read the full article at SecurityWeekwww.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.