Vulnerabilities

CVSS

9.0 Critical

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Risk score

72.0

Published

2026-08-19

Status

Deferred

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

Weaknesses

CWE-434

Coverage 2

threat-intel

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

This week saw a surge in high-impact cyberattacks and vulnerabilities, highlighting the increasing sophistication and speed of threat actors. AI is now being weaponized to craft exploit scripts targeting Siemens PLCs, wh…

The Hacker News · 6d ago High

CVE-2026-19478CVE-2021-27101CVE-2023-34362UNRUvulnerabilitysupply-chainransomware

vulnerability

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

A critical vulnerability (CVE-2026-32475) in the Elementor Pro WordPress plugin allows unauthenticated attackers to upload PHP files and execute code, potentially leading to remote code execution. The flaw stems from a d…

The Hacker News · Aug 20, 2026 High

CVE-2026-32475CVE-2026-65640wordpressvulnerabilityremote-code-execution

All articles mentioning it

Advisories and references

• patchstack.com/articles/critical-unauthenticated-file-upload-to-rce-...
• patchstack.com/database/wordpress/plugin/elementor-pro/vulnerability...