21/08/2026
CRITICAL FLAW IN ELEMENTOR PRO PLUGIN - a new critical vulnerability in the popular Elementor Pro plugin has been published which allows any website visitor to upload files (including malicious PHP files) to a vulnerable site.
If you use the Elementor Forms widget with a file upload field then you are vulnerable. Please update to the patched version (v4.2.2) immediately to avoid your website being compromised.