CVE-2026-32475

LLM-synthesized narrative grounded in this CVE's description and references.

• WordPress/Elementor Prollm-fuzzy

  Range: <=4.2.1

  Package: https://wordpress.org/plugins/elementor-pro

• patchstack.com/articles/critical-unauthenticated-file-upload-to-rce-in-elementor-pro-pluginnvd
• patchstack.com/database/wordpress/plugin/elementor-pro/vulnerability/wordpress-elementor-pro-plugin-4-2-1-arbitrary-file-upload-vulnerabilitynvd

• Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
  SecurityWeek · Sep 5, 2026
• Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
  The Hacker News · Sep 4, 2026
• Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin
  Wordfence Blog · Sep 2, 2026
• Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)
  Wordfence Blog · Aug 27, 2026
• ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
  The Hacker News · Aug 24, 2026
• Critical WordPress Plugin Vulnerability Exposes Sites to RCE Attacks
  Cyber Security News · Aug 21, 2026
• Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress Plugin
  Wordfence Blog · Aug 20, 2026
• Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
  The Hacker News · Aug 20, 2026
• Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
  Patchstack Blog · Aug 19, 2026