Searchenginejournal.com

WordPress Metform Elementor Contact Form Builder Plugin Vulnerability

The U.S. government National Vulnerability Database (NVD) issued an advisory about a vulnerability affecting Metform Elementor Contact Form Builder WordPress plugin that could leak sensitive ...
SecurityWeek

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Hackers have been exploiting a critical-severity vulnerability in the Elementor Pro WordPress plugin to hack websites, WordPress security firm Defiant warns.
Searchenginejournal.com

Elementor WordPress Contact Form Plugin Vulnerability Exposes Up To 200,000 Sites

The United States National Vulnerability Database published an advisory of an XSS vulnerability affecting the popular Metform Elementor Contact Form Builder, which exposes over 200,000 active installs ...

Two major security flaws are affecting more than six million WordPress websites

Patches are available, so WordPress users should hurry up and apply them.
BleepingComputer

Critical Elementor Pro bug exposes WordPress sites to RCE attacks

A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server. Identified as CVE-2026-32475, the flaw affects ...
heise online

WordPress plugin Elementor Pro vulnerability: 6 million websites at risk

The WordPress plugin Elementor Pro is used in over six million active installations, making it widely adopted. Consequently, a newly discovered vulnerability weighs heavily, as it allows ...