A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]
Elementor WordPress flaw lets attackers create admin accounts
Résumé + lien vers la source. Sans paywall, sans tracking.