LOWVulnerability
Global

Elementor WordPress flaw lets attackers create admin accounts

·Source: BleepingComputer

Updated:

Executive Summary

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]

Analysis

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]
Source Attribution

Originally published by BleepingComputer on Sep 25, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Japanese Railway Operators Hit with Weekend Cyber Attacks

Tokyo Metro and Keio have revealed separate cyber-attacks

Infosecurity Magazine
MEDIUMVulnerability

Kiteworks Urges Customers to Restart Systems After Shutdown Notice

Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence

Infosecurity Magazine
MEDIUMVulnerability

mambu connects with Mastercard Move

Mambu and Mastercard have today announced a strategic collaboration that will make it easier for financial institutions using Mambu to offer fast, secure and transparent cross-border payments.

Finextra