> TritonInfoSec News
Home / Sep 06, 2026 / Story
0
#9 SecurityWeek general September 05, 2026 at 13:00 UTC

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

By Ionut Arghire

AI Summary

CVE-2026-32475 (CVSS 9.8), a critical arbitrary file upload vulnerability in the Elementor Pro WordPress plugin's form submission handler, is being actively exploited to compromise websites. Given Elementor Pro's widespread deployment across WordPress sites, administrators should apply patches immediately.

Read full article → https://www.securityweek.com/elementor-pro-wordpre…

Relevance score: 76.0/100

# More from September 06

  1. 1
    Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores The Hacker News
  2. 2
    Google warns of new Chrome zero-day flaw exploited in attacks BleepingComputer
  3. 3
    Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials The Hacker News
  4. 4
    Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code The Hacker News
  5. 5
    Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities The Hacker News
  6. 6
    Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel The Hacker News
  7. 7
    39 New Methods That Compromise Passkey Authentication BleepingComputer
  8. 8
    Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain BleepingComputer
  9. 10
    US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure The Record