Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

4 / 10 results
Active filter:vendor: elementor✕ clear
Elementor WordPress plugin CSRF flaw enables admin account takeover via linkhighbug_reportVulnerability
bug_reportVulnerability

Elementor WordPress plugin CSRF flaw enables admin account takeover via link

Elementor Website Builder WordPress plugin versions 4.3.0 and 4.3.1 only. Affects over 2 million active installations. Fixed in version 4.3.2.

Elementor26 Sep · 07:55 UTC
Elementor WordPress plugin CSRF flaw enables admin account creationhighbug_reportVulnerability
bug_reportVulnerability

Elementor WordPress plugin CSRF flaw enables admin account creation

Elementor plugin for WordPress. Specific affected versions not disclosed in available data. Impacts WordPress sites using the Elementor page builder plugin.

Elementor25 Sep · 16:13 UTC
Elementor Pro CVE-2026-32475 actively exploited for webshell uploadscriticalbug_reportVulnerability
bug_reportVulnerability

Elementor Pro CVE-2026-32475 actively exploited for webshell uploads

Elementor Pro plugin for WordPress versions 4.2.1 and earlier. Affects sites with published Elementor Pro Form widgets containing File Upload fields. Over 6 million active installations globally.

CVE-2026-324753 Sep · 12:52 UTC
Elementor Pro WordPress plugin allows arbitrary file upload and RCEcriticalbug_reportVulnerability
bug_reportVulnerability

Elementor Pro WordPress plugin allows arbitrary file upload and RCE

Elementor Pro WordPress plugin. Specific vulnerable versions not disclosed in available data. Affects WordPress sites with Elementor Pro installed.

Elementor20 Aug · 12:39 UTC