CVE-2026-32475

CriticalCVSS 9.0

Published: 19/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Elementor Pro up to version 4.2.1 contains an unrestricted upload of dangerous file type vulnerability, allowing the use of malicious files.

Risk Assessment

An attacker can upload malicious files, potentially leading to code execution on the server or further system compromise.

Recommendation

Update Elementor Pro to a version newer than 4.2.1 that includes the fix for this vulnerability.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.