2026年8月20日 2:04 ET 发布 · 更新于 3 个月前 · 1 个来源
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
The Hacker News
·
原始报道
Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous type. "The flaw lives in the Forms module's File
原文