Tag: CVE-2026-32475

WordPress page builder flaw turns file forms into remote code execution

Patchstack warns that a CVSS 9.0 flaw in Elementor Pro lets unauthenticated attackers upload PHP files and take over sites.