The Hacker News

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Elementor 4.3.0 and 4.3.1 contain a CSRF flaw that can create an admin account when a logged-in administrator opens a crafted ...
RS Web Solutions

Elementor Vulnerability in WordPress Allows Attackers to Generate Admin Accounts

Critical Elementor vulnerability in WordPress lets attackers create admin accounts. Learn how to protect your site from this ...

Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated ...

Elementor, falla CSRF permette di creare admin con un solo clic

Una vulnerabilità Elementor consente di creare account amministratore con un clic nelle versioni 4.3.0 e 4.3.1, già corrette ...

Falha grave no Elementor expõe mais de 2 milhões de sites WordPress a ataques de controlo total

O erro, classificado como uma falsificação de pedidos entre sites (CSRF) e avaliado com uma pontuação CVSS de 8,8 em 10,0, ...

Одна ссылка против 2 млн Wordpress сайтов. В Elementor нашли опасную дыру

Уязвимость CVE-2026-62062 получила 8,8 балла по CVSS 3.1 и затрагивает Elementor 4.3.0 и 4.3.1. Patchstack описала проблему 25 сентября после сообщения от специалиста под псевдонимом Saggre. Сам ...
BLOGSPAN.NET

Elementor-Lücke macht aus einem Klick einen neuen Admin-Zugang – 2 Millionen Websites betroffen

Eine CSRF-Lücke in Elementor (4.3.0/4.3.1) erlaubt per Link einen fremden Admin-Account – CVSS 8,8, Fix in zwei Tagen, aber ...
Linformatique.org

Une faille Elementor permet de créer un compte administrateur

Une faille CSRF dans Elementor 4.3.0 et 4.3.1 permet de créer un compte administrateur après un clic piégé. Le correctif ...