Critical Elementor Pro flaw actively exploited to attack WordPress websites

The recently patched critical vulnerability CVE-2026-32475 in the Elementor Pro WordPress plugin is being exploited to upload a webshell payload and execute arbitrary commands on servers.