Elementor Pro

CVE-2026-32475: Elementor Pro RCE Exploited in the Wild Threat actors exploit a critical Elementor Pro vulnerability in the wild

CVE-2026-32475: Elementor Pro RCE Exploited in the Wild

Do Son September 2, 2026

TL;DR Attackers are actively exploiting a critical Elementor Pro vulnerability in the wild. Specifically, tracked as CVE-2026-32475,...

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites

Do Son August 21, 2026

TL;DR CVE-2026-32475 is a CVSS 9.8 unauthenticated arbitrary file upload flaw in Elementor Pro. It affects an...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-20079CVSS 10.0
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated,...
Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
CVE-2025-25249CVSS 8.1
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through...
Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
CVE-2026-19490
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1...
CISA KEV📅 Added to KEV: Sep 9, 2026
CVE-2026-75650CVSS 10.0
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that...
Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 8, 2026
CVE-2026-81963CVSS 7.8
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate...
CISA KEV📅 Added to KEV: Sep 8, 2026
CVE-2026-85880CVSS 7.8
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Sep 8, 2026
CVE-2026-86218CVSS 10.0
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 7, 2026

Critical Alert 4 Active Exploits Detected Today

CVE-2026-32475: Elementor Pro RCE Exploited in the Wild

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites