EUVD-2026-62595
GHSA-684f-44pq-4p6q
Severity by source
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Network-reachable and unauthenticated (AV:N/PR:N/UI:N) file upload yielding RCE that escapes the plugin to the host (S:C, C/I/A:H); AC:H reflects the non-trivial upload-bypass precondition.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
3DescriptionCVE.org
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files.
This issue affects Elementor Pro: from n/a through 4.2.1.
AnalysisAI
Unauthenticated arbitrary file upload leading to remote code execution affects the Elementor Pro WordPress plugin from unspecified early versions through 4.2.1, allowing a remote attacker with no credentials to upload a dangerously-typed file (e.g. a PHP webshell) and execute code on the hosting server. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to a WordPress site running Elementor Pro at or below version 4.2.1 with the vulnerable upload functionality reachable, and no authentication (CVSS PR:N) or user interaction (UI:N) is needed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals point to genuine high priority, with some caveats. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Elementor Pro to the vendor's patched release as soon as it is available; the input indicates the flaw affects versions up to 4.2.1, so a build later than 4.2.1 is expected to contain the fix, but no exact fixed version is confirmed in the provided data - verify the current version via the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/elementor-pro/vulnerability/wordpress-elementor-pro-plugin-4-2-1-arbitrary-file-upload-vulnerability) and the plugin's changelog before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all WordPress deployments to identify sites running Elementor Pro and their installed versions; immediately disable the plugin as a precaution if operationally feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Elementor Pro
View allThe Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check
The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to exe
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the video_html_t
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget's custom_
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an SVGZ file upl
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Elementor E
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Med
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today