CyberSIXT Search
Elementor product

Pro

← All Elementor products

No Pro CVE is in the CISA KEV catalogue.

Tracked since 21 Aug · latest article Sat 5 Sep · RSS

Added to KEV · 90 days
0
of 0 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download

No Pro CVE is in the CISA KEV catalogue.

Coverage

4 articles · all timeFull timeline

4 articles from 3 outlets since 21 Aug; the latest 51 days ago.

Pro: coverage over time4 articles from 3 outlets. First report 21 Aug by SecurityOnline. Busiest week: 3 articles, week of 31 Aug. 0 in the last 7 days. Pro: coverage over time4 articles from 3 outlets. First report 21 Aug by SecurityOnline. Busiest week: 3 articles, week of 31 Aug. 0 in the last 7 days.
  • Article
  • First report
Show as table
Pro: articles
Published (UTC)OutletHeadline
Sat 5 Sep · 13:31 UTCSecurityWeekElementor Pro Flaw Exploited to Upload PHP Backdoors on Websites
Fri 4 Sep · 09:51 UTCThe Hacker NewsAttackers Exploit Two WordPress Flaws to Deploy Web Shells
Wed 2 Sep · 16:47 UTCSecurityOnlineCVE-2026-32475: Elementor Pro RCE Exploited in the Wild
Fri 21 Aug · 09:31 UTCSecurityOnlineCritical CVE-2026-32475 Flaw Hits 6 Million WordPress Sites

Who reported 3 outlets, last 12 months

  • SecurityOnline2
  • The Hacker News1
  • SecurityWeek1
  1. Elementor Pro Flaw Exploited to Upload PHP Backdoors on WebsitesSecurityWeek
  2. Attackers Exploit Two WordPress Flaws to Deploy Web ShellsThe Hacker News
  3. CVE-2026-32475: Elementor Pro RCE Exploited in the WildSecurityOnline
  4. Critical CVE-2026-32475 Flaw Hits 6 Million WordPress SitesSecurityOnline

All CVEs in coverage

1
CVE-2026-32475WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityCVSS9.0Critical–Not in KEV2.0%EPSS4articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device