Elementor Pro

Mentions · 7d0
Mentions · 30d0
All mentions6
First seenAug 19, 2026
Last mentionedSep 5, 2026

Timeline

6 articles · newest first

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Attackers are actively exploiting critical file-upload flaw CVE-2026-32475 in Elementor Pro, hacking WordPress sites; Defiant has blocked over 190,000 exploit attempts since patching.

SecurityWeekSep 5, 13:00 UTC · Sep 5, 2026Exploit / PoCExploitedCVE-2026-324753

Elementor Pro RCE Flaw Under Active Attack

A critical Elementor Pro Forms module flaw allowing unauthenticated file uploads is under active attack against widely used WordPress sites.

SOCRadarSep 4, 13:34 UTC · Sep 4, 2026Exploit / PoCExploited3

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Wordfence blocked 440,000+ exploit attempts against critical unauthenticated RCE flaws in WordPress plugins Super Forms and Elementor Pro.

The Hacker NewsSep 4, 08:48 UTC · Sep 4, 2026Exploit / PoCExploitedCVE-2026-14894 CVE-2026-324752

Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin

Attackers actively exploit a critical unauthenticated file upload flaw in Elementor Pro (6M+ installs), enabling remote code execution and site takeover.

WordfenceSep 2, 15:07 UTC · Sep 2, 2026Exploit / PoCExploited1 · 1 read

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Patchstack disclosed CVE-2026-32475 (CVSS 9.0), an unauthenticated file-upload flaw in Elementor Pro enabling PHP upload and RCE; fixed in version 4.2.2.

The Hacker NewsAug 20, 06:04 UTC · Aug 20, 2026VulnerabilityCVE-2026-32475 CVE-2026-656407 · 2 reads

Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin

Elementor Pro WordPress plugin has an unauthenticated arbitrary file upload flaw in its Forms module allowing remote code execution.

PatchstackAug 19, 17:17 UTC · Aug 19, 2026Vulnerability1 · 1 read

Related CVEs

by mentions

CVE-2026-324752%9.0
Unauthenticated PHP File Upload (RCE) in Elementor Pro WordPress Plugin
published Aug 19, 2026Elementor Pro (WordPress plugin)
CVE-2026-148943%9.8
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the…
published Jul 10, 2026WordPressPoC
CVE-2026-656402%8.8
Author-Level RCE in WordPress Core via Malicious Postscript File Upload
published Aug 17, 2026WordPress (core)

Appears with

WordPressproduct · 6
Elementorvendor · 5
Patchstackvendor · 3
Elementororganization · 3
Wordfencevendor · 2
Automatticvendor · 2
Defiantvendor · 1
Super Formsproduct · 1
WordPressvendor · 1
Mushr00w_upl.phpmalware · 1
Patchstackorganization · 1
Defiantorganization · 1
Wordfenceorganization · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned Sep 5, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.