One of the most popular website builder plugins for WordPress carries a high-severity vulnerability that threat actors can use to take over the vulnerable website completely, researchers have warned.
Cybersecurity researcher Jerome Bruandet from NinTechNet said he discovered a flaw in Elementor Pro that allows an authenticated attacker to create an administrator account. That gives the attackers a range of possibilities, including one that’s being actively used - to redirect all traffic to an external malicious website.
