#CVE-2026-32475

Elementor Pro flaw let attackers plant executable files on WordPress sites

A bug in the paid version of the popular WordPress builder let strangers upload PHP files and run code on the server. A patch is out.