Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress Plugin

August 20, 2026 Yanac

On July 24th, 2026, we received a submission for an Unauthenticated Arbitrary File Upload vulnerability in Elementor Pro, a WordPress plugin with an estimated 6,000,000 active installations. This vulnerability makes it possible for unauthenticated attackers to upload arbitrary files, including executable PHP files, to a vulnerable site, which can lead to remote code execution and complete site takeover.
The post Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress Plugin appeared first on Wordfence.WordfenceRead More