Elementor WordPress flaw lets attackers create administrator accounts — 25.09.2026

A CSRF vulnerability in the Elementor WordPress plugin could allow an unauthenticated attacker to create administrator accounts.