A high-severity cross-site request forgery (CSRF) vulnerability in the Elementor Website Builder WordPress plugin (versions 3.21.0 to 3.21.3) could allow an unauthenticated attacker to create rogue administrator accounts. This flaw, which has a CVSS score of 8.8, enables attackers to take full control of a site if an administrator clicks a crafted link. Users are urged to update their Elementor plugin to a patched version.