Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. The flaw was disclosed, but no patch details were provided. Users are advised to update the plugin or apply security patches to mitigate the risk.