Elementor CSRF Flaw Puts WordPress Hosts on Update Alert
Patchstack says Elementor 4.3.0 and 4.3.1 allowed crafted links to bypass REST API CSRF checks, raising the risk of unwanted administrator actions on WordPress sites.
Tag: Elementor
Independent reporting on web hosting, domains and the infrastructure behind the internet.
Patchstack says Elementor 4.3.0 and 4.3.1 allowed crafted links to bypass REST API CSRF checks, raising the risk of unwanted administrator actions on WordPress sites.