SecurityThe Hacker Newsabout 2 hours ago
Elementor CSRF Flaw Hits 2 Million Sites
2 min read
Elementor versions 4.3.0 and 4.3.1 carry a CSRF flaw scoring 8.8 that lets an unauthenticated attacker create rogue administrator accounts when a logged-in admin opens a crafted link. The bug affects over 2 million installs of those versions. Elementor fixed it in 4.3.2, released earlier this week.
Level
Hype check
Tap to vote and see what everyone thinks.