#csrf

Elementor Flaw Lets Attackers Hijack WordPress Sites With a Single Admin Click

A cross-site request forgery bug in the popular page-builder plugin can create rogue admin accounts if a logged-in administrator visits a booby-trapped page.