CVE-2026-32475: Elementor Pro

Critical severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

Affected products

• Elementor Elementor Pro: up to and including 4.2.1

Published 2026-08-19. Last modified 2026-08-20.