Elementor

Elementor CSRF Flaw Lets Attackers Take Over Sites

A high-severity CSRF vulnerability in the Elementor WordPress plugin allows attackers to create administrator accounts.