SignalsMonitor LIVE INTELLIGENCE
SECURITYQUIET

21 days ago

Elementor WordPress flaw lets attackers create admin accounts

SIGNALSMONITORSECURITY

What's happening

SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 25 Sept 2026, 18:13 UTC. The headline in use is “Elementor WordPress flaw lets attackers create admin accounts”. This note is SignalsMonitor's own briefing, not the publisher's article.

What we know

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...

BleepingComputerRead at BleepingComputer

Story timeline

Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.

Reported by 1 outlet

  • BleepingComputer