Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Summary

Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery (CSRF) vulnerability, which has yet to be assigned a CVE identifier, carries a CVSS score of 8.8 out of 10.0. It only affects versions

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.