A high-severity CSRF vulnerability has been identified in the Elementor Website Builder plugin for WordPress. Unauthenticated attackers can exploit this flaw by tricking an administrator into clicking a malicious link, allowing them to create rogue admin accounts and achieve full site takeover. Site administrators should apply available patches immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →