Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on BleepingComputer.