Plan
active
Elementor CSRF flaw enables unauthenticated admin account creation
- Engineer — Plan: Update Elementor to the patched version immediately if you run WordPress sites using this plugin; no public PoC or KEV listing yet, but admin account creation via CSRF is a critical-severity class of flaw worth prioritizing this week.
- SOC/IR — Learn: No active exploitation or IOCs reported; file the CSRF-to-admin-creation TTP for future WordPress-focused detection work, but no hunt or rule tuning warranted now.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.