File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form HandlerCVE-2026-32475Elementor · CVSS 9 · 2.0% likelycovered by CyberSIXT

   CWE-4345 articles

2. An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subsc…CVE-2020-13126Elementor · CVSS 9.9 · 8.6% likely

   CWE-434

3. An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP ar…CVE-2020-7055Elementor · 3.1% likely

   CWE-434

4. WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerabilityCVE-2024-24934Elementor · CVSS 8.5 · 0.7% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.