CVE-2026-27041

CriticalCVSS 9.9

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

The Elementor (Premium) plugin versions up to 2.0.6 contain a vulnerability that allows unauthorized file uploads by users with appropriate permissions.

Risk Assessment

An attacker could exploit this vulnerability to upload malicious files, potentially leading to server takeover or data leakage.

Recommendation

It is recommended to update the Elementor plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.