CVE-2026-32475

CRÍTICO 9.0CVE-2026-32475 · Published 19/08/2026 · updated 20/08/2026

En resumen

CVE-2026-32475 es una vulnerabilidad CRÍTICO (CVSS 9.0).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 80.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

References

patchstack.com/articles/critical-unauthenticated-file-upload-to-rce-in-elementor-pro-plugin
patchstack.com/database/wordpress/plugin/elementor-pro/vulnerability/wordpress-elementor-pro-plugin-4-2-1-arbitrary-file-upload-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free