Incident: CVE-2026-32475: WordPress Elementor Pro Unauthenticated RCE

VULNEX SECURITY ENGINE

AUDITING REALTIME ASSETS & THREAT POSTURE...

Overview
Dashboard
Organisation
Organisation
Websites 5
Security
Health Monitor
Security Posture
Vulnerabilities
Top 5 Priorities
All Vulnerabilities
Compare Profiles
Negative Test
Operations
Scans
Incidents 8
Logs
Admin
Users
Reports
Challenge Mode

CVE-2026-32475: WordPress Elementor Pro Unauthenticated RCE

Detected 23 Aug 2026 01:46:20

CRITICAL

Description:

Target identified running WordPress with vulnerable Elementor Pro plugin version <= 4.2.1 allowing unauthenticated arbitrary file upload and remote code execution.