Vendor
Elementor
- First Reported
- Aug 20, 2026
- Latest Reported
- Sep 25, 2026
Reported Context (2)
- A CSRF vulnerability in the Elementor WordPress plugin can let an attacker trick a logged-in administrator into creating a new attacker-controlled admin account through a crafted link. Elementor WordPress Flaw Could Let Attackers Create Admin Accounts
- A critical flaw in Elementor Pro, tracked as CVE-2026-32475, can let attackers upload a malicious PHP file and achieve remote code execution on vulnerable WordPress servers. Critical Elementor Pro Flaw Enables Remote Code Execution on Vulnerable WordPress Sites
CVE (1)
People (2)
MITRE ATT&CK (1)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.