Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.

Elementor shipped the fix for CVE-2026-32475 on August 19. Attackers started exploiting it the same...