Repeated unauthenticated POST to Elementor Pro forms endpoint (CVE-2026-32475)

Arnold Chan@slaz

•updated Sep 4, 2026•0•0•4

Detects anomalous, high-volume unauthenticated POST requests to the Elementor Pro 'admin-ajax.php' endpoint with the 'elementor_pro_forms_send_form' action. This behavior is indicative of potential exploitation attempts or reconnaissance associated with the Elementor Pro file upload vulnerability (CVE-2026-32475).