Tag: Patchstack

WordPress page builder flaw turns file forms into remote code execution

Patchstack warns that a CVSS 9.0 flaw in Elementor Pro lets unauthenticated attackers upload PHP files and take over sites.