Elementor 4.3.0/4.3.1 (~2 million sites) has a CSRF flaw where one crafted link — clicked by a logged-in admin — creates a new administrator account for an attacker. No JavaScript, no form. Just a link in an email, DM or comment. Update now, then check your admin users for anything you don't recognise. How it works, how to check, and Wazuh detection rules: https://www.cyber-defence.io/insights/elementor-csrf-flaw-one-click-site-takeover #WordPress #Elementor #InfoSec #CSRF