A critical cross-site request forgery (CSRF) vulnerability in the Elementor plugin allows attackers to create new administrator accounts on vulnerable WordPress sites.
A cross-site request forgery (CSRF) vulnerability in the Elementor WordPress plugin allows attackers to create administrator accounts via a single malicious link.