Elementor

A cross-site request forgery vulnerability has been reported in Elementor, the widely used WordPress page builder plugin. The flaw could allow attackers to take over a website if a logged-in administrator clicks on a crafted link, triggering unauthorized actions with the admin's privileges. Site owners are being urged to update the plugin promptly and remain cautious of unsolicited links.