Elementor

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 25, 2026
Last mentionedSep 26, 2026

Timeline

3 articles · newest first

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Elementor CSRF in versions 4.3.0 and 4.3.1 can create admin accounts after one clicked link.

The Hacker NewsSep 26, 09:55 UTC · Sep 26, 2026Vulnerability1 · 1 read

Elementor WordPress flaw lets attackers create admin accounts

Elementor 4.3.0 and 4.3.1 CSRF bug lets a malicious link create WordPress admin accounts.

BleepingComputerSep 25, 18:13 UTC · Sep 25, 2026Vulnerability2 · 1 read

Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites

Elementor 4.3.0 and 4.3.1 have a CVSS 8.8 CSRF bug that can create a new administrator account.

PatchstackSep 25, 09:31 UTC · Sep 25, 2026Vulnerability1 · 1 read

Appears with

Elementorvendor · 3
WordPressproduct · 3
Patchstackorganization · 3
Elementororganization · 1

Entities are extracted by the model from each article. First seen Sep 25, 2026, last mentioned Sep 26, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.