Critical severity9.0NVD Advisory· Published Aug 19, 2026
CVE-2026-32475
CVE-2026-32475
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files.
This issue affects Elementor Pro: from n/a through 4.2.1.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- Critical Unauthenticated File Upload to RCE in Elementor Pro PluginPatchstack Blog · Aug 19, 2026