Elementor WordPress flaw lets attackers create admin accounts

T1Covered by 1 source · first reported by BleepingComputer at 25 Sept, 18:13 UTC

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]